Infosecurity.US

Information Security & Occasional Forays Into Adjacent Realms

  • Web Log

via the comic delivery system monikered Randall Munroe at XKCD!

SCP, Not

January 18, 2019 by Marc Handelman in UNIX, Unix-like OS, Berkeley r-Commands, Code Flaws

Another tremendous security post via Catalin Cimpanu writing for ZDNet's Zero Day; in which, the good Mr. Cimpanu tells the tale of the thirty-six year-old flaw in SCP - the Secure Copy Protocol. This time, rearing it's apparently flawed noggin through coded flaws in SCP (the 'secure' version of RCP - the Remote Copy Protocol). The flaws, in their essential form, permit malign SCP servers free-reign on the host system. Just astonishing this has existed since the last quarter of the twentieth century...

"The vulnerabilities have been discovered by Harry Sintonen, a security researcher with Finnish cyber-security firm F-Secure, who's been working since August last year to have them fixed and patched in the major apps that support the SCP protocol." via Catalin Cimpanu at ZDNet's Zero Day

January 18, 2019 /Marc Handelman
UNIX, Unix-like OS, Berkeley r-Commands, Code Flaws