Upcoming OpenSSH vulnerability

Niels Provos provos at citi.umich.edu
Wed Jun 26 04:03:14 EST 2002


On Tue, Jun 25, 2002 at 10:34:33AM +0200, Corinna Vinschen wrote:
> The Cygwin version of OpenSSH can't support it since sendmsg()/recvmsg()
> currently can't transmit file descriptors.
You still get pre-authentication privilege separation if you support
mmap.  File descriptor passing is required only for
post-authentication privilege separation.

Niels.



More information about the openssh-unix-dev mailing list