[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: openssh version info bug or feature ?



On Wed, Feb 06, 2002 at 08:11:44AM -0500, Anthony DeRobertis wrote:
> >Either way, I don't see how this could be a security hole
> >justifying any bug report higher than 'minor'.

> It would justify more than minor, but in the security 
> scanner --- not in ssh.

Very true.

> I'd just worry that existing network audits will be thrown off 
> by changing the version. I _do_ think we should change the 
> version when we release a security fix, though. Or when we make 
> major changes (not sure if we do for ssh).

That's pretty much it in a nutshell.

Will you (or someone else) be submitting a bugreport against
ssh to that effect?

-- 
===========================================================
Paul "TBBle" Hampson, MCSE
4th year CompSci/Asian Studies student, ANU
The Boss, Bubblesworth Pty Ltd (ABN: 51 095 284 361)
Paul.Hampson@Anu.edu.au

Of course Pacman didn't influence us as kids. If it did,
we'd be running around in darkened rooms, popping pills and
listening to repetitive music.

This email is licensed to the recipient for non-commercial
use, duplication and distribution.
===========================================================

Attachment: pgpfDAR5yO5Y0.pgp
Description: PGP signature


Reply to: