Musl libc '*' sentinel enables unauthenticated shell on Alpine sshd
Unauthenticated users gain shell access on musl-based Alpine AWS images due to crypt function behavior and sshd handling.
1
Stories per day · 30 days
2 stories, newest first · one card per story
Stories tagged #crypt
Musl libc allows long passwords to bypass root lock in OpenSSH
Passwords longer than 256 bytes accepted on musl-based SSHD despite * lock in shadow.