Re: openssh remote exploit

[Henning Brauer <hb-fulldisclosure () bsws de>]

On Wed, Sep 17, 2003 at 06:43:17AM +1000, Darren Reed wrote:
> In some mail from Edward W. Ray, sie said:
> > Either your just an ass or an Theo hater or both.
> > Either way, your comments are without merit.  If one looks at the record of
> > OpenBSD and OpenSSH it is certainly way better than the other software out
> > there.
> Really ?  I think you'll find that there are quite a number of people,
> aside from myself, who think that the "1 exploit in X years" is on one
> end of it as misleading and the other end, a lie, excluding this current
> openssh problem.

so? the statement is entirely true.
proof that the current problem (which is in really really old code 
from the original ssh btw) is remotely exploitable and we increase the 
counter.

i find it quite disgusting that you need to use any forum that even 
remotely touches openbsd to spread this FUD.

-- 
Henning Brauer, BS Web Services, http://bsws.de
hb () bsws de - henning () openbsd org
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html