Language Selection

English French German Italian Portuguese Spanish

Dangerous Security Flaw Likely Just a Hoax

Filed under
Security

A claim of a software vulnerability in a program used to connect securely to servers across the Internet is likely a hoax, according to an analyst with the SANS Internet Storm Center.

The program, called OpenSSH (Secure Shell), is installed on tens of millions of servers made by vendors such as Red Hat, Hewlett-Packard, Apple and IBM. It is used by administrators to make encrypted connections with other computers and do tasks such as remotely updating files. OpenSSH is the open-source version, and there are commercial versions of the program.

Earlier this week, SANS received an anonymous e-mail claiming of a zero-day vulnerability in OpenSSH, which means a flaw in the software is already being exploited as it becomes public. It's the most dangerous type of software vulnerability since it means there's no fix for it yet and the bad guys know about it.

A true zero-day vulnerability in OpenSSH could be devastating for the Internet, allowing hackers to have carte blanche access to servers and PCs until a workaround or a patch is readied.

"That's why I think people are actually creating quite a bit of a panic," said Bojan Zdrnja.

rest here




More in Tux Machines

Top 4 Linux screenwriting software

A multi-platform software with a minimalist aesthetic, Trelby is clean enough to help you focus on the task at hand but still packs a surprising amount of tools and options into its interface, with auto- editing and formatting features alongside a character name database, reports, charts and more. Read more

Ubuntu Touch RTM Update 10, Important Milestone Achieved – Screenshot Tour

The Ubuntu Touch operating system has reached a new milestone and Canonical has released a new update for the RTM branch, bringing the entire project a little closer to a shippable version that can run smoothly and without any bugs. Read more

GenodeOS 14.11 Now Supports Intel's Wireless Hardware

Released today was version 14.11 of the Genode OS Framework, an interesting open-source OS research project we've been following for a few years now. The big addition to Genode OS 14.11 is the addition of an Intel wireless stack. The latest Intel WiFi hardware is now supported by Genode thanks to its developers porting the Intel WiFi driver from Linux (iwlwifi) along with WPA supplicant application support to enable WiFi WPA access. Genode OS 14.11 also brings an implementation of a trading scheme for CPU resources. There's also a new dynamic linker, Raspberry Pi networking support, new GUI components, and other changes. More details on the new release of Genode OS 14.11 can be found at Genode.org. Read more

Fedora 21 RC Is Out and Ready for Testing

The Fedora project has announced that Fedora 21 RC is now available for download and testing, for all the new flavors, Workstation, Server, and Cloud. Read more