Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 31 Jul 2001 17:17:16 +0900 (JST)
From:      Sys Admin <admin@cb21.co.jp>
To:        <freebsd-questions@freebsd.org>
Cc:        ADMIN <admin@cb21.co.jp>
Subject:   ssh to a compromised (probably) box
Message-ID:  <Pine.BSF.4.33.0107311708530.37842-100000@ns1.cb21.co.jp>

next in thread | raw e-mail | index | archive | help


Hello,

 Just being curious.

 Considering the following scenario

 Box A (local) ----------------------> Box B (remote)

 Assume that box B has been compromised (root powers)

 If I ssh into box B from A, su to root and start investigating the
damage done, will the hacker be able to sniff the root password ? (during
su to root)

 [ Given that critical binaries (sshd, su ..) remained unchanged ]

Thanks in advance,

Tad.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0107311708530.37842-100000>