Be the first to post a text review of pam_ssh. Rate and review a project by clicking thumbs up or thumbs down in the right column.

• Tracker artifact added

  openhs created the Re-add identity to already running agent artifact

  posted by openhs 45 days ago

• Forum thread added

  jpsecher created the Patches from Debian forum thread

  posted by jpsecher 59 days ago

• Tracker artifact added

  thomas_gl created the double-free bug with pam_ssh-1.97 artifact

  posted by thomas_gl 98 days ago

• Tracker artifact added

  Anonymous created the Read keyfile locations from ~/.ssh/config artifact

  posted by nobody 126 days ago

• Tracker artifact added

  Anonymous created the Support for keypaths outside ~/.ssh artifact

  posted by nobody 126 days ago

• Forum thread added

  markfaine created the undefined symbol: pam_ssh_log forum thread

  posted by markfaine 160 days ago

• Tracker artifact added

  Anonymous created the segfault with EOF as password artifact

  posted by nobody 204 days ago

• pam_ssh 1.97 file released: pam_ssh-1.97.tar.bz2

  Version 1.97 released ===================== 2009-04-11 Wolfgang Rosenauer * pam_get_pass.c: CVE-2009-1273 pam_ssh used a certain prompt if a user found to exist to ask for the SSH passphrase explicitely depending on whether the username was valid or invalid, which made it easier for remote attackers to enumerate usernames.

  posted 209 days ago

• pam_ssh 1.97 has been released

  A rough overview what has changed since 1.92 what was the last real release from SourceForge: - The module is usable now for session use only if wanted. It starts an ssh-agent without adding keys to it in that case. - The option to allow blank passphrases is now 'nullok' while the old option is still available but deprecated. - The debug option is now really supported as documented. - We didn't start the ssh-agent if the close_session module wasn't called correctly but the ssh-agent was killed (e.g. system crashes). That should be solved in almost all cases now. - Improved logging - SECURITY FIX: pam_ssh used a certain prompt if a user found to exist to ask for the SSH passphrase explicitely depending on whether the username was valid or invalid, which made it easier for remote attackers to enumerate usernames. (CVE-2009-1273)

  posted by rosenauer 209 days ago

• File released: /pam_ssh/1.97/pam_ssh-1.97.tar.bz2

  posted 209 days ago