regreSSHion: Remote Unauthenticated Code Execution Vulnerability in OpenSSH server

Na, megy ez xz nélkül is.

De a Kaspersky a nemzetbiztonsagi kockázat. Vajon hány ilyen bujkál még?

For this attack against Ubuntu 6.06.1, we simply re-used the timing
strategy that we used against Debian 3.0r6: it takes ~10,000 tries on
average to win the race condition, and with 10 connections (MaxStartups)
accepted per 120 seconds (LoginGraceTime), it takes ~1-2 days on average
to obtain a remote root shell.