Decade-Old Flaw Allows Passwordless SSH Access to Some Linux Devices
🤖 AI-generated content — The title and summary were produced automatically by artificial intelligence, without human editorial review.
A decade-old flaw can let attackers access certain Alpine Linux devices through SSH without a password. Exploitation requires OpenSSH with musl but no PAM, a passwordless account marked “*” in /etc/shadow, and at least one password-enabled account using a SHA256 or SHA512 hash. Other distributions may also be vulnerable.
Continue in the app — vote & join in ➔Source: Ars Technica · via ahirlevel.hu