OpenSSH ssh-keysign information leak
Published:		05.05.2011
Source:		BUGTRAQ
SecurityVulns ID:		11651
Type:		local
Level:		5/10
Description:		File descriptor for private keys file is not closed on exeternal application execution.

Affected:

OPENBSD : OpenSSH 5.8

Original document

OPENBSD, Revised: Portable OpenSSH security advisory: portable-keysign-rand-helper.adv (05.05.2011)

Discuss:

Read or add your comments to this news (0 comments)