Vulnerability Development mailing list archives

Re: ssh-1.2.27 remote buffer overflow - exploitable -- OFF TOPIC


From: bsmargiassi () SKYWEB NET (Bill Smargiassi)
Date: Tue, 9 Nov 1999 11:39:15 -0500


----- Original Message -----
From: Frank <foofc7ca () SOFTHOME NET>

This is submitted to the Freebsd bug tracking system, although there are
doubtless other vendors who leave this package, despite the existence of the
ssh-2.X.

ssh 1.x is usually used because neither 1.x or 2.x are really free software,
but 1.x's license at least allows for non-commercial use in a commercial
setting. The 2.x license states that any use in a commercial setting
requires purchasing a $500 license. Hence the lsh and OpenSSH projects. This
will probably keep 2.x from ever really catching on outside universities.

bill


Current thread: