Re: OpenSSH advisory

[Chris Ess <azarin () tokimi net>]

> I stumbled across a debian advisory about OpenSSH.
>
> http://www.debian.org/security/2002/dsa-134
>
> I cant find anything more detailed about this issue, does anyone have
> further information ?

A copy of ISS's advisory is here:
http://online.securityfocus.com/archive/1/278818/2002-06-23/2002-06-29/0

Also, OpenSSH 3.4p1 is out which contains a fix to the bug but I've only
seen it on ftp.openbsd.org

Hope this helps.


Chris Ess
System Administrator / CDTT (Certified Duct Tape Technician)