Skip to Content.
Sympa Menu

sm-security - Re: [SM-Security] Openssh remote root. for 3.6p1

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Seth Woolley <seth AT tautology.org>
  • To: Craig Van Tassle <cvantassle AT sbcglobal.net>
  • Cc: SM-Security AT lists.ibiblio.org
  • Subject: Re: [SM-Security] Openssh remote root. for 3.6p1
  • Date: Mon, 15 Sep 2003 18:40:53 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

New vuln? Full Disclosure has two threads so far:
http://lists.netsys.com/pipermail/full-disclosure/2003-September/010103.html
http://lists.netsys.com/pipermail/full-disclosure/2003-September/010135.html

The second one is of note. See anything there that I don't? I'm waiting
for a response to the second thread for confirmation.

But we're on 3.6.1p2 right now... think we're safe?

Seth

On Mon, 15 Sep 2003, Craig Van Tassle wrote:

> There has been some reports of a new vuln for openssh 3.6p1. As far as
> I know the vuln is only for 3.6p1 and 3.6p2 is save.
>
>
> _______________________________________________
> SM-Security mailing list
> SM-Security AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-security
> ------------ Output from gpg ------------
> gpg: WARNING: using insecure memory!
> gpg: please see http://www.gnupg.org/faq.html for more information
> gpg: Signature made Mon Sep 15 17:04:30 2003 PDT using DSA key ID 63223FE3
> gpg: BAD signature from "Craig Van Tassle <craig AT codestorm.org>"
>
>

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/Zmoq7fQ833vqzH0RAuw1AKCrBfCOYisWUqMUhfNDP1hA1KSZyACfQvlZ
jORXgBQ76UAyc8GjA/imHmE=
=X8Ca
-----END PGP SIGNATURE-----





Archive powered by MHonArc 2.6.24.

Top of Page