Re: doing an ssh into a compromised host
Greetings!
On Tue, 2 Nov 2004 08:59:07 +0200 (IST) Vassilii Khachaturov
<vassilii@tarunz.org> wrote:
> I have been doing ssh into the box. THe client is set up not to
> request the X forwarding by the default. When I try "ssh -v" now, I
> observe no X forwarding being established, whereas "ssh -X -v" does
> establish X. Question is, could the server have forced an X forwarding
> on me (w/o my knowledge) having sniffed my local keystrokes?
You could force the SSH client to *not* forward X11 with -x
(the low-caps x char) regardless other client/server-side
specifications. If you do not specify any other special
forwarding (-L or -R) then there will be no forwarding.
HTH
Volker Tanger
ITK Security
Reply to: