Barion Pixel

Hírek

Decade-Old Flaw Allows Passwordless SSH Access to Some Linux Devices

A decade-old flaw can let attackers access certain Alpine Linux devices through SSH without a password. Exploitation requires OpenSSH with musl but no PAM, a passwordless account marked “*” in /etc/shadow, and at least one password-enabled account using a SHA256 or SHA512 hash. Other distributions m