RE: ssh trojaned

["Rory Savage" <rsavage () nandomedia com>]

The copy I retrieved from openbsd.org was not infected.  Was there site
hacked since
the original release of 3.4p1?  Can anyone explain why the code was tampered
with?

-----Original Message-----
From: Fabrizio Siciliano [mailto:fsiciliano () optiumcorp net]
Sent: Thursday, August 01, 2002 2:22 PM
To: Steve Wright; vuln-dev () securityfocus com
Cc: bugtraq () securityfocus com
Subject: RE: ssh trojaned


The copy over at http:// packetstorm.linuxsecurity.com is not infected.

./fab

> -----Original Message-----
> From: Steve Wright [mailto:stevew () cwazy co uk]
> Sent: Thursday, August 01, 2002 6:49 AM
> To: vuln-dev () securityfocus com
> Subject: ssh trojaned
>
>
>
> Hello,
>
> I'm no programmer so I'm hoping someone can confirm this for
> me.. I am correct in thinking the trojan currently in OpenSSH
> portable 3.4p1 only
> runs during compilation ?
>
> ie a copy of ssh compiled using this source will not have
> anything nasty
> build into it ?
>
> Thanks,
> Steve.