From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 8997 invoked by alias); 9 Feb 2016 07:53:16 -0000 Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm Precedence: bulk List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Received: (qmail 8924 invoked by uid 89); 9 Feb 2016 07:53:15 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=1.9 required=5.0 tests=AWL,BAYES_50,FSL_HELO_BARE_IP_2,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS autolearn=no version=3.3.2 spammy=Hx-languages-length:1114, Willis, cygwin-ug-net, willis X-HELO: plane.gmane.org Received: from plane.gmane.org (HELO plane.gmane.org) (80.91.229.3) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with (AES256-SHA encrypted) ESMTPS; Tue, 09 Feb 2016 07:53:13 +0000 Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1aT36i-0003NY-0s for cygwin@cygwin.com; Tue, 09 Feb 2016 08:53:08 +0100 Received: from 217.10.52.10 ([217.10.52.10]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 09 Feb 2016 08:53:08 +0100 Received: from Stromeko by 217.10.52.10 with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Tue, 09 Feb 2016 08:53:08 +0100 To: cygwin@cygwin.com From: Achim Gratz Subject: Re: Possible Security Hole in SSHD w/ CYGWIN? Date: Tue, 09 Feb 2016 07:53:00 -0000 Message-ID: References: <016c01d16305$252c94c0$6f85be40$@comcast.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit User-Agent: Loom/3.14 (http://gmane.org/) X-IsSubscribed: yes X-SW-Source: 2016-02/txt/msg00102.txt.bz2 David Willis comcast.net> writes: > To reproduce, connect via SSH (from either a Linux or CYGWIN/Windows client) > to a CYGWIN-based SSHD server using a normal privileged user account (an > account preferably that is not an admin either on the client or server > machine). Once connected to the Windows SSHD server, CD to a UNC path of a > network share. Once CD'd to that path, check Computer Management on that > server, and go to Shares->Open Sessions, and you will see that the user > connected is the privileged SSHD server account (and it will obviously show > as being connected from the machine you are SSH'd into). Did you read https://cygwin.com/cygwin-ug-net/ntsec.html, configured sshd and the user accounts correctly and are logging in with a password using either of the methods described? FWIW, I'm seeing the connected user as the one that I logged into via ssh. In fact the sshd user account doesn't have any network access rights anyway, so I couldn't connect to any network share if that acount would be used. Regards, Achim. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple