[SM-Security] Openssh remote root. for 3.6p1
niki at lunar-linux.org
Tue Sep 16 22:15:51 EDT 2003
OpenSSH 3.7.1p1 has been released and it has changes to the same area as
the last exploit proactive fix has...
On Tue, 2003-09-16 at 03:40, Seth Woolley wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> New vuln? Full Disclosure has two threads so far:
> The second one is of note. See anything there that I don't? I'm waiting
> for a response to the second thread for confirmation.
> But we're on 3.6.1p2 right now... think we're safe?
> On Mon, 15 Sep 2003, Craig Van Tassle wrote:
> > There has been some reports of a new vuln for openssh 3.6p1. As far as
> > I know the vuln is only for 3.6p1 and 3.6p2 is save.
> > _______________________________________________
> > SM-Security mailing list
> > SM-Security at lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/sm-security
> > ------------ Output from gpg ------------
> > gpg: WARNING: using insecure memory!
> > gpg: please see http://www.gnupg.org/faq.html for more information
> > gpg: Signature made Mon Sep 15 17:04:30 2003 PDT using DSA key ID 63223FE3
> > gpg: BAD signature from "Craig Van Tassle <craig at codestorm.org>"
> - --
> Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
> Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
> Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2 (FreeBSD)
> -----END PGP SIGNATURE-----
> SM-Security mailing list
> SM-Security at lists.ibiblio.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.ibiblio.org/pipermail/sm-security/attachments/20030917/cfa7d387/attachment.bin
More information about the SM-Security