Full Disclosure mailing list archives

Re: OpenSSH exploit


From: itojun () itojun org (Jun-ichiro itojun Hagino)
Date: Wed, 17 Sep 2003 09:07:01 +0900 (JST)

Is there a complete list of vulnerable versions of OpenSSH including 
the 2.x branches?  In other words how far back does this issue go?

        as far as i see buffer.c issue goes back to revision 1.1 (= import
        from tatu's original ssh).

itojun

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: