Bug in OpenSSH / Config Checker

Bug in OpenSSH / Config Checker(puffy.nolink.ch)

29 points by oherrala 5 years ago | 9 comments

teddyh 5 years ago |

Sound like this, strictly speaking, is a bug in the config checker, not in the SSH daemon itself.

tssva 5 years ago | |

Strictly speaking the config checker is part of the SSH daemon.

teddyh 5 years ago | | |

Not a part which is ever run when the SSH daemon is started normally.

pferde 5 years ago | |

Just like a flat tire is a problem with the tire, not with the car.

theamk 5 years ago | | |

No, not really. The config checker is an entirely optional part, and I was not even aware it existed.

This situation is like “Ford dealership installed wrong tires on Ford truck when customer asked for them, causing an accident”. Yes, it is the same people, and the car ended up on the ditch, but I wouldn’t call this “problem with the car”

dmarinus 5 years ago |

although this isn't nice I bet there are multiple ways to fool the config checker and not be able to login anymore.