<story><title>Trivial authentication bypass in libssh leaves servers wide open</title><url>https://arstechnica.com/information-technology/2018/10/bug-in-libssh-makes-it-amazingly-easy-for-hackers-to-gain-root-access/</url></story><parent_chain></parent_chain><comment><author>kevin_b_er</author><text>From the reading, the &amp;quot;hack&amp;quot; is pretty embarrassing.  The server-&amp;gt;client message that announces you&amp;#x27;re authenticated is instead sent client-&amp;gt;server and the server just sets its mode to that.  Abracadabra, you&amp;#x27;re logged in!</text></comment>
<story><title>Trivial authentication bypass in libssh leaves servers wide open</title><url>https://arstechnica.com/information-technology/2018/10/bug-in-libssh-makes-it-amazingly-easy-for-hackers-to-gain-root-access/</url></story><parent_chain></parent_chain><comment><author>ddevault</author><text>Note that libssh != openssh, which is what&amp;#x27;s probably running on your server.</text></comment>