OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Bugtraq archives for 4th quarter (Oct-Dec) 1997: Re: Ulrich Flegel's SSH/X11 "vulnerability"

Re: Ulrich Flegel's SSH/X11 "vulnerability"

Alan Cox (alanLXORGUK.UKUU.ORG.UK)
Fri, 3 Oct 1997 21:18:54 +0100 

> > provides a major security improvement by not sending the authorization
> > cookie or the X11 packets in the clear.
>
> For increased security, the XFree86 Xnest server can be used to protect
> your display.  For example:
>
> Xnest :2 ; xterm -display :2 -e slogin -l username remotehost

Xnest isnt ideal and there is a better system available now. XFree86 3.3
supports the Broadway extensions, and one aspect of that is the ability
to partition X clients into groups. It's used to do things like run untrusted
X apps in netscape plugins. Each group has its own xauth and they can share
information. Have a look at xrx and Xsecurity in the X11R6.3 build tree.

In theory ssh could make use of the Xsecurity features.

Alan