Full Disclosure mailing list archives

Re: The lowdown on SSH vulnerability

From: Robert Jaroszuk <zim () iq pl>
Date: Tue, 16 Sep 2003 15:07:17 +0200

On Tue, 16 Sep 2003, Carl Livitt wrote:

;
; There _is_ a patch:
;
; http://www.freebsd.org/cgi/cvsweb.cgi/src/crypto/openssh/buffer.c.diff?r1=1.1.1.6&r2=1.1.1.7&f=h

There is also new openssh released:

ftp://ftp1.ca.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.7p1.tar.gz

-- 
..... Robert Jaroszuk - zim@iq,pl - [ IQ PL Sp. z o.o. ] .....
GCS/IT/O d? s: a-- C++ ULB++++$ P+ L++++$ E--- W- N+ w-- O- M-
V- PS+ PE Y(+) PGP-(+++) t-- 5? X- R* tv-- DI++ b++>+++ DI- D-
... The superior warrior wins without fighting -- Sun Tzu. ...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

The lowdown on SSH vulnerability Carl Livitt (Sep 16)
- Re: The lowdown on SSH vulnerability Carl Livitt (Sep 16)
  - Re: The lowdown on SSH vulnerability B.K. DeLong (Sep 16)
  - Re: The lowdown on SSH vulnerability Mark Vevers (Sep 16)
- RE: The lowdown on SSH vulnerability Andy Wood (Sep 16)
  - RE: The lowdown on SSH vulnerability Ivan Dimitrov (Sep 19)
- Re: The lowdown on SSH vulnerability Daniel Berg (Sep 16)
  - SSH Vulnerability Dan A. Milisic (Sep 16)
  - Re: The lowdown on SSH vulnerability Joe Shevland (Sep 16)
- <Possible follow-ups>
- Re: The lowdown on SSH vulnerability Robert Jaroszuk (Sep 16)