/.ssh/Authorized_keys is public php -
when open http://mysite.com/.ssh/authorized_keys
page opens , has following information:
ssh-rsa aaaab3nzac1yc2eaaaabiwaaaieavz7xl5q7x+uobugs9tmwh41a2iczny2klngohdsdl6e3kfxqhvxxcxbol0qejwuejatp0su3y7//p5e35qdimdew8w7w2fpddnktmhhcvfs1bikop4bxwse5jdhgt2zpt0rgxk/sr79q8g1opi9v2xldducq5mzq44vewslxvnu=
what this? , vulnerable? can attacker gain admin privilege it? if so, do? how attack?
version: php/5.3.18
the authorized_keys
file used ssh servers store public keys use in public/private key authentication. on linux, file in .ssh
directory in user's home directory whom keys for. guess user use has web root home directory , when public key added user, file created. possible sign of intrusion, more normal since attacker wouldn't need add public key, in . theoretically, there should no harm in file existing , visible since public key means nothing without private key, there no need people able see it. if know don't need file can delete it, or if need it, can put .htaccess
file in directory block web access.
Comments
Post a Comment