3 ms·
This bug is problematic for all those situations where the ssh protocol is not used for telnet-style command line, but as a transport. e.g. Git uses ssh as tra
by simgidacav 13y ago
This bug is problematic for all those situations where the ssh protocol is not used for telnet-style command line, but as a transport.
e.g. Git uses ssh as transport protocol, but github (and similar platforms) don't support direct user login.
- johnchristopher 13y agoWhat about git-shell over ssh ?
- simgidacav 13y ago> What about git-shell over ssh ? I guess that gives the same problem. The exploitation allows to execute arbitrary code, as you would do by launching commands from, say, bash. I don't know git-shell, but I guess (from the manpage) it restricts the allowed commands. The exploitation of the bug would allow a malicious user to execute a command instead of git-shell. A good example of command could be /bin/bash.