Bug 2981

Summary:	Are you sure you want to continue accepts any extra letters after yes or no
Product:	Portable OpenSSH	Reporter:	troy <troy>
Component:	ssh	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	CLOSED DUPLICATE
Severity:	security	CC:	djm
Priority:	P5
Version:	7.4p1
Hardware:	Other
OS:	Linux

Description troy@box293.com 2019-03-15 09:13:33 AEDT

When you are prompted if you want to continue, y or n is not accepted however any extra characters after yes or no is accepeted, like yessir or nosir.

$ ssh xxx@xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is SHA256:olwf2l6OhbtQ6sOo6OyVDzZy17YLuxkTdmGnmR6746E.
Are you sure you want to continue connecting (yes/no)? n
Please type 'yes' or 'no': nosir
Host key verification failed.

$ ssh xxx@xxx.xxx.xxx.xxx
The authenticity of host 'xxx.xxx.xxx.xxx' can't be established.
RSA key fingerprint is SHA256:olwf2l6OhbtQ6sOo6OyVDzZy17YLuxkTdmGnmR6746E.
Are you sure you want to continue connecting (yes/no)? y
Please type 'yes' or 'no': yessir
Warning: Permanently added 'xxx.xxx.xxx.xxx' (ECDSA) to the list of known hosts.

Comment 1 Damien Miller 2019-05-10 14:41:29 AEST


*** This bug has been marked as a duplicate of bug 2803 ***

Comment 2 Damien Miller 2020-02-14 15:59:22 AEDT

Closing all resolved bug with release of openssh-8.2