Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot - The Hacker News

Automated excerpt

An unauthenticated attacker can supply an oversized password to access accounts that are deliberately configured without usable passwords, without having to steal credentials or SSH keys. "A successful SSHole attack grants access with the compromised account's existing permissions," Safe Security said. Alpine is also recommending that users investigate "Accepted password for" log entries involving accounts that should not accept password logins.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.