Security Incidents mailing list archives

Re: Internet SSH scans thread


From: p.kerr () auckland ac nz
Date: 26 Mar 2006 08:12:18 -0000

Not exactly a "new" discovery, just a timely warning to recheck your sshd_config after applying vendor patches. We have 
a couple of MacOS-X boxes authenticating users thru our campus ldap. We had blocked ssh access for a group of 
"convenience" accts in that ldap domain. A recent Apple Security update wrote in a new sshd_config, hosing our 
settings. Fortunately our warning system worked...


Current thread: