sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Re: [SM-Security] Openssh remote root. for 3.6p1

From: Niki Guldbrand <niki AT lunar-linux.org>
To: SM-Security AT lists.ibiblio.org
Cc:
Subject: Re: [SM-Security] Openssh remote root. for 3.6p1
Date: Wed, 17 Sep 2003 04:15:51 +0200

Hi All.

OpenSSH 3.7.1p1 has been released and it has changes to the same area as
the last exploit proactive fix has...

Nik

On Tue, 2003-09-16 at 03:40, Seth Woolley wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> New vuln? Full Disclosure has two threads so far:
> http://lists.netsys.com/pipermail/full-disclosure/2003-September/010103.html
> http://lists.netsys.com/pipermail/full-disclosure/2003-September/010135.html
>
> The second one is of note. See anything there that I don't? I'm waiting
> for a response to the second thread for confirmation.
>
> But we're on 3.6.1p2 right now... think we're safe?
>
> Seth
>
> On Mon, 15 Sep 2003, Craig Van Tassle wrote:
>
> > There has been some reports of a new vuln for openssh 3.6p1. As far as
> > I know the vuln is only for 3.6p1 and 3.6p2 is save.
> >
> >
> > _______________________________________________
> > SM-Security mailing list
> > SM-Security AT lists.ibiblio.org
> > http://lists.ibiblio.org/mailman/listinfo/sm-security
> > ------------ Output from gpg ------------
> > gpg: WARNING: using insecure memory!
> > gpg: please see http://www.gnupg.org/faq.html for more information
> > gpg: Signature made Mon Sep 15 17:04:30 2003 PDT using DSA key ID 63223FE3
> > gpg: BAD signature from "Craig Van Tassle <craig AT codestorm.org>"
> >
> >
>
> - --
> Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
> Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
> Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.2 (FreeBSD)
>
> iD8DBQE/Zmoq7fQ833vqzH0RAuw1AKCrBfCOYisWUqMUhfNDP1hA1KSZyACfQvlZ
> jORXgBQ76UAyc8GjA/imHmE=
> =X8Ca
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> SM-Security mailing list
> SM-Security AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-security

Attachment: signature.asc
Description: This is a digitally signed message part

Re: [SM-Security] Openssh remote root. for 3.6p1 , (continued)
- Re: [SM-Security] Openssh remote root. for 3.6p1, Seth Woolley, 09/15/2003
  - Message not available
    - Re: [SM-Security] Openssh remote root. for 3.6p1, Seth Woolley, 09/16/2003
      - Re: [SM-Security] Openssh remote root. for 3.6p1, Craig Van Tassle, 09/16/2003
        
        Re: [SM-Security] Openssh remote root. for 3.6p1, Craig Van Tassle, 09/16/2003
      - Re: [SM-Security] Openssh remote root. for 3.6p1, Niki Guldbrand, 09/16/2003
        
        Re: [SM-Security] Openssh remote root. for 3.6p1, Hamish Greig, 09/16/2003
        
        Re: [SM-Security] Openssh remote root. for 3.6p1, Ladislav Hagara, 09/16/2003
        
        Re: [SM-Security] Openssh remote root. for 3.6p1, Hamish Greig, 09/16/2003
        Re: [SM-Security] Openssh remote root. for 3.6p1, Ladislav Hagara, 09/16/2003
  - Re: [SM-Security] Openssh remote root. for 3.6p1, Ladislav Hagara, 09/16/2003
  - Re: [SM-Security] Openssh remote root. for 3.6p1, Niki Guldbrand, 09/16/2003
    - Re: [SM-Security] Openssh remote root. for 3.6p1, Seth Woolley, 09/17/2003