Jacob Tomlinson • 1/15/2016

Fixing the SSH roaming vulnerability (CVE-2016-0777)

This article explains the OpenSSH client roaming vulnerability (CVE-2016-0777), which affects clients from version 5.4 onward on Linux and OS X. It describes how a compromised SSH server could exploit this to steal a client's private keys. The guide provides a command to check if a system is vulnerable and offers step-by-step instructions to fix the issue by disabling the roaming feature in the SSH configuration.

0 comments

#security #vulnerability #ssh