Re: SNI-23: SSH - Vulnerability in ssh-agent (fwd)
meskes@topsystem.de (Michael Meskes) wrote on 21.01.98 in <199801210810.JAA17029@gauss.topsystem.de>:
> Are we vulnerable?
I think so, unless there's been a new ssh uploaded in the last few days.
> SSH for unix versions 1.2.17 through 1.2.21 are vulnerable if installed
> with default permissions. Versions of SSH prior to 1.2.17 are subject to
> a similar (but different) attack.
Ours is 1.2.21, unstalled suid root.
MfG Kai
--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org .
Trouble? e-mail to templin@bucknell.edu .
Reply to: