nanog mailing list archives

Re: new openssh issue


From: Avleen Vig <lists-nanog () silverwraith com>
Date: Wed, 17 Sep 2003 10:26:57 -0700


On Tue, Sep 16, 2003 at 03:50:04PM -0400, Valdis.Kletnieks () vt edu wrote:
A posting to full-disclosure quotes Theo as saying HP and Cisco are affected,
and I don't see any reason that Juniper would *NOT* be, given the common code
base of the OpenSSH implementations.  I'm not going to say the routers are
vulnerable, but I *would* say that ACLs blocking port 22 to the router might
be a good idea.....

Isn't this a common practice anyway? Has been anywhere sensible I've
seen :-)


Current thread: