OpenSSH vulnerability

seclists.org

42 pointssajal832 comments

I guess I must be missing something -- why would you ever want the client to specify auth mechanisms to the server at all?