←back to thread

Unauthenticated Remote Code Execution in Erlang/OTP SSH

(nvd.nist.gov)
198 points kimi | 1 comments | 17 Apr 25 13:29 UTC | HN request time: 0.205s | source
1. marioflach ◴[17 Apr 25 21:39 UTC] No.43722520[source]▶
I wrote a GitHub „clone“ a while ago. Implementing Git’s wire and transfer protocol directly in Elixir.

https://git-scm.com/docs/protocol-v2

https://git-scm.com/book/ms/v2/Git-on-the-Server-The-Protoco...

Adding support for Git over SSH was very easy using Erlang built-in SSH libs.

https://github.com/redrabbit/git.limo

https://github.com/redrabbit/git.limo/blob/master/apps/gitgu...