Potential DoS against forwarded ssh-agent

Daniel Kahn Gillmor dkg-openssh.com at fifthhorseman.net
Thu Jan 6 06:39:00 EST 2005


Does anyone have any thoughts about this issue?  What would it take to
get this patch (or something like it) included in OpenSSH?

Or am i barking up the wrong tree?  Is this not really a potential
DoS?  Or does my proposed patch not resolve the problem?

Thanks for any feedback you might have.

Regards,

	--dkg


On December 26, dkg-openssh.com at fifthhorseman.net said:

 > It appears there is an opportunity for a denial-of-service attack
 > against ssh-agent when using ForwardAgent.




More information about the openssh-unix-dev mailing list