Conversation

Notices

1. Embed this notice
   feld (feld@bikeshed.party)'s status on Thursday, 20-Jul-2023 02:58:59 JST feld

   in reply to

   • Lobsters
   > if an attacker had access to the server where Alice's ssh-agent is
   forwarded to, and had an unprivileged access to Alice's workstation,
   
   if at attacker has any access at all you should assume they have a root exploit laying around and will be using it
   • Embed this notice
     Lobsters (lobsters@botsin.space)'s status on Thursday, 20-Jul-2023 02:59:00 JST Lobsters

     CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt | https://lobste.rs/s/n3jlhj #security