Bugtraq mailing list archives

Re: URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0


From: Michal Zalewski <lcamtuf () gis net>
Date: Sat, 21 Jul 2001 11:16:58 -0400 (EDT)

On Fri, 20 Jul 2001, Stephanie Thomas wrote:

PLATFORMS IMPACTED: Red Hat Linux 6.1 thru 7.1

RedHat Linux 7.0 ships OpenSSH 2.2.1 (7.0). RedHat Linux 7.1 ships OpenSSH
2.5.2. Previous versions shipped SSH 1.2.xx, which, if I understood, are
not vulnerable. You are vulnerable only if you have installed SSH.com SSH
3.0.0 by hand, but then, it is not RedHat fault.

-- 
_____________________________________________________
Michal Zalewski [lcamtuf () bos bindview com] [security]
[http://lcamtuf.coredump.cx] <=-=> bash$ :(){ :|:&};:
=-=> Did you know that clones never use mirrors? <=-=



Current thread: