[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openssh-bugs
Subject:    [Bug 2981] New: Are you sure you want to continue accepts any extra letters after yes or no
From:       bugzilla-daemon () bugzilla ! mindrot ! org
Date:       2019-03-14 22:13:33
Message-ID: bug-2981-705 () https ! bugzilla ! mindrot ! org/
[Download RAW message or body]

https://bugzilla.mindrot.org/show_bug.cgi?id=2981

            Bug ID: 2981
           Summary: Are you sure you want to continue accepts any extra
                    letters after yes or no
           Product: Portable OpenSSH
           Version: 7.4p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: security
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs@mindrot.org
          Reporter: troy@box293.com

When you are prompted if you want to continue, y or n is not accepted
however any extra characters after yes or no is accepeted, like yessir
or nosir.

$ ssh xxx@xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is
SHA256:olwf2l6OhbtQ6sOo6OyVDzZy17YLuxkTdmGnmR6746E.
Are you sure you want to continue connecting (yes/no)? n
Please type 'yes' or 'no': nosir
Host key verification failed.

$ ssh xxx@xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is
SHA256:olwf2l6OhbtQ6sOo6OyVDzZy17YLuxkTdmGnmR6746E.
Are you sure you want to continue connecting (yes/no)? y
Please type 'yes' or 'no': yessir
Warning: Permanently added 'xxx.xxx.xxx.xxx' (ECDSA) to the list of
known hosts.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
[prev in list] [next in list] [prev in thread] [next in thread]