- Joined
- Dec 19, 2005
- Messages
- 18,901
Pretty bad 
"The most important of the OpenBSD vulnerabilities is the authentication bypass flaw CVE-2019-19521. The vulnerability existed in the authentication system making it prone to remote attacks. Nonetheless, the vulnerability did not affect all systems alike. Describing the vulnerability in an advisory, the researchers stated, This vulnerability is remotely exploitable in smtpd, ldapd, and radiusd, but its real-world impact should be studied on a case-by-case basis. For example, sshd is not exploitable thanks to its defense-in-depth mechanisms."
Attribution link: https://latesthackingnews.com/2019/...d-in-openbsd-including-authentication-bypass/
"The most important of the OpenBSD vulnerabilities is the authentication bypass flaw CVE-2019-19521. The vulnerability existed in the authentication system making it prone to remote attacks. Nonetheless, the vulnerability did not affect all systems alike. Describing the vulnerability in an advisory, the researchers stated, This vulnerability is remotely exploitable in smtpd, ldapd, and radiusd, but its real-world impact should be studied on a case-by-case basis. For example, sshd is not exploitable thanks to its defense-in-depth mechanisms."
Attribution link: https://latesthackingnews.com/2019/...d-in-openbsd-including-authentication-bypass/