Bug In OpenSSH Makes Brute-Force Attacks Possible

A bug in the popular OpenSSH allows attackers to try thousands of passwords, while the software actually after six failed logins should disconnect. The vulnerability was by a security researcher with the alias " Kingcope announced. "

OpenSSH, also known as OpenBSD Secure Shell, is a set of network tools based on the SSH protocol, and allows users to securely log on to servers for instance, or remotely manage machines. Servers that allow login via SSH are regularly targeted by brute force attacks. In the case of OpenSSH, this is limited by after six unsuccessful attempts to disconnect. By using the vulnerability, it is possible to try to open thousands of passwords via a log-in window, that by default a two minute open state.

The problem is in the latest version of OpenSSH present, the researcher says. Which warns it especially FreeBSD systems at risk, because that keyboard-interactive authentication is enabled by default. On Reddit let a reader know that the "Challenge Response Authentication no" protects against the attack and was involved in its installation standard.

ISC: Another Port For SSH Is Not Meaningless

Who SSH (Secure Shell) to log on to remote computers and servers will benefit from it to change the default port 22, as late as a handler of the Internet Storm Center (ISC) know. SSH is a popular protocol for managing computers. Standard protocol listens on port 22.

This will also be a lot of scans and attacks on this port. At present, there Reddit , in response to this article , a discussion or change the default port is wise. One of the criticisms is that " security through obscurity "is not a security measure, but only one way to slow an attacker and therefore offers little value. "While it is true that it is difficult to stop a determined attacker to cause you provide, any measure that prevents arbitrary script kiddies and scanners to your SSH look not entirely meaningless," says ISC handler Rick Wanner.

Wanner says more than 15 years SSH on a non-standard port to run, such as port 52222. "Of course this is not the only security measure that I use. I patch daily use hosts.allow where possible, keys and passphrases instead passwords and use Deny Hosts ", he tells. ISC handler notes that he does not use port 22 because of "security through obscurity" benefits, but because it eliminates all noise on port 22.

Port 22 is a favorite target of brute force attacks and port scans rising every year. These activities cause Wanner as much noise in the logs. "Why would you tolerate it if it is not needed?", He notes. The default port change he would attack traffic are much diminished that he occasionally his defense test to see if it still works.