X2Go Bug report logs - #106
SSH Host Key Validation fails when ECDSA is already known

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: Christian Franke <admin@np.tl>

To: submit@bugs.x2go.org

Subject: SSH Host Key Validation fails when ECDSA is already known

Date: Fri, 18 Jan 2013 19:15:09 +0100

Package: x2goclient
Version: 4.0.0.1

I have a server to which I regularly use SSH. On one client system, I
used regular OpenSSH to connect to that server, accepting its ECDSA key
before ever connecting using x2goclient.

While I currently can ssh to that server without any problems using
ECDSA, when trying to connect with x2goclient, I get: "The host key for
this server was not found but an othertype of key exists. An attacker
might change the default server key to confuse your client into thinking
the key does not exist"

(nb: if I remember correctly x2goclient used to call regular OpenSSH,
now it seems to implement ssh by itself. I liked the former approach
much better since it allowed me to use SSH features like ControlMaster,
ProxyCommand etc. Also it avoids cat and mouse issues like this bug
seemingly originating from differing SSH Client feature sets)

Message #14 received at 106@bugs.x2go.org (full text, mbox, reply):

From: Samira Ramin Bahram <mary.mbia@yahoo.com>

To: "samiraramin@hotmail.com" <samiraramin@hotmail.com>

Subject: Salam,

Date: Tue, 6 Jan 2015 13:50:45 +0000 (UTC)

[Message part 1 (text/plain, inline)]

Salam,
Am miss Samira from Iran, interested in you,&
wish to have you as my friend,
for friend is all about Respect, Admiration and love passion,
and sharing of ideas,
i intend to send my picture for you, if you reply me.
thanks from Samira.

samiraramin@hotmail.com

[Message part 2 (text/html, inline)]

Message #19 received at 106@bugs.x2go.org (full text, mbox, reply):

From: "INFO@GOOGLE.ORG"<fao@pun.unipune.ac.in>

Subject: Official Notification

Date: Tue, 24 Oct 2017 16:13:23 -0700

[Message part 1 (text/html, inline)]

[GOOGLE-1.jpg (image/jpeg, attachment)]

[GOOGLE-1.jpg (image/jpeg, attachment)]

[GOOGLE-1.jpg (image/jpeg, attachment)]

Message #24 received at 106@bugs.x2go.org (full text, mbox, reply):

From: "INFO@GOOGLE.ORG" <gmedford@atso.org.tr>

To: Undisclosed recipients:;

Subject: GOOD NEWS FROM LARRY PAGE GOOGLE.

Date: Sat, 24 Mar 2018 16:59:34 -0700

[Message part 1 (text/html, inline)]

[GOOGLE-1.jpg (image/jpeg, attachment)]

[GOOGLE.pdf (application/octet-stream, attachment)]

Message #29 received at 106@bugs.x2go.org (full text, mbox, reply):

From: Sophia jasper <yenajerome67@gmail.com>

To: Recipients <Sophia>

Subject: hello

Date: Thu, 11 Feb 2021 12:53:57 +0000

Greetings I am  Sophia jasper. I hope we can start a relationship please reply me   

Message #34 received at 106@bugs.x2go.org (full text, mbox, reply):

From: "BITCOIN-INVESTITION!!!" <c.everhart02@gmail.com>

To: Recipients <c.everhart02@gmail.com>

Subject: BITCOIN-INVESTITION

Date: Wed, 12 Jan 2022 16:50:12 +0100

[Message part 1 (text/plain, inline)]

Gute Nachrichten! Ich habe bei dieser Bitcoin-Plattform mit 1000 $ investiert und sie haben meine Investition mit 50% verdoppelt, nachdem ich nur 3 Tage investiert hatte ... Sie sollten alle hingehen und sie ausprobieren ... Sie erhalten auch 10% für den Empfehlungsbonus. Melden Sie sich bei cryptobinaryinvest.com (gbwx2001@gmail.com) an und machen Sie eine Einzahlung, dann erhalten Sie nach 3 Tagen Gewinne. Probieren Sie sie aus und danken Sie mir später lol.

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.