Tim Kosse

Filezilla: Abuse of third-party infrastructure

2

Hello, the Scoop Installer is abusing the infrastructure at https://filezilla-project.org/ or one of its subdomains. Our infrastructure is meant to be used only by humans and FileZilla itself, not third-party...

SSH: Incorrect handling of "want reply" field of received SSH_MSG_GLOBAL_REQUEST and SSH_MSG_CHANNEL_REQUEST messages

3

Basically, as per RFC 4254, if "want reply" is TRUE, SSH_MSG_GLOBAL_REQUEST and SSH_MSG_CHANNEL_REQUEST must be replied to. Likewise, if "want reply" is FALSE, these messages must not be replied to....