Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

After a quick search, I haven't been able to find lay risk assessments of the PermitLocalCommand option in ssh.

Are there known vulnerabilities that allow arbitrary code execution on the local host (the client) associated with this option?

e.g., xterm escape sequences used to manipulate stdin.

Do any such vulnerabilities affect rxvt-unicode (without -insecure)?

This follows from other questions:

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.