/.ssh/Authorized_keys is public php -


when open http://mysite.com/.ssh/authorized_keys page opens , has following information:

ssh-rsa aaaab3nzac1yc2eaaaabiwaaaieavz7xl5q7x+uobugs9tmwh41a2iczny2klngohdsdl6e3kfxqhvxxcxbol0qejwuejatp0su3y7//p5e35qdimdew8w7w2fpddnktmhhcvfs1bikop4bxwse5jdhgt2zpt0rgxk/sr79q8g1opi9v2xldducq5mzq44vewslxvnu=

what this? , vulnerable? can attacker gain admin privilege it? if so, do? how attack?

version: php/5.3.18

the authorized_keys file used ssh servers store public keys use in public/private key authentication. on linux, file in .ssh directory in user's home directory whom keys for. guess user use has web root home directory , when public key added user, file created. possible sign of intrusion, more normal since attacker wouldn't need add public key, in . theoretically, there should no harm in file existing , visible since public key means nothing without private key, there no need people able see it. if know don't need file can delete it, or if need it, can put .htaccess file in directory block web access.


Comments

Popular posts from this blog

monitor web browser programmatically in Android? -

Shrink a YouTube video to responsive width -

wpf - PdfWriter.GetInstance throws System.NullReferenceException -