Am 02.06.2010 21:41, schrieb Joachim Schipper: > But note that someone with access to a single account could use this to > gain the password for that account, and hence possibly sudo access.
The attack, as suggested by me, is about passphrases for private keys that should never get transmitted to the server. Gruß Jan -- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
