[rescue] OpenSSH vulnerability (patched again, remote restart)

Kevin kevin at mpcf.com
Wed Sep 17 14:52:42 CDT 2003


Very helpful info, thanks.

/KRM

On Wed, 17 Sep 2003 12:55:49 -0600
"Todd C. Miller" <Todd.Miller at courtesan.com> wrote:
> A SIGHUP will cause sshd to re-exec itself as long as
> it was started with a full path.  E.g.,
> /usr/sbin/sshd, not just sshd.
> 
> Also note that killing the master sshd does not
> affect the children(current connections) so it is
> safe to kill the master while logged in via ssh, move
> the old binary out of the way or unlink it, then copy
> in the new binary and start it.  Of course, you
> should test that you can connect before logging out
> ;-)
> 
>  - todd



More information about the rescue mailing list