OpenSSH musl bypass draws live exploit attempts
Attackers have begun probing a password bypass in certain OpenSSH servers after SANS Internet Storm Center researchers saw clear exploit attempts. The flaw affects some password-disabled Linux accounts when an unusually long password is sent, and the evidence so far points to active exploitation attempts rather than confirmed compromise. Live probes against password-disabled accounts SANS researcher Johannes Ullrich said the first clear attempts appeared on November 5, when the passwords…