[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: openssh version info bug or feature ?




On Wednesday, February 6, 2002, at 03:14 AM, Paul Hampson wrote:

You could submit a bug report if you think it's wrong...
but it'd be a minor bug, I suspect. Unless you can build
a really good argument why having sshd give away the Debian-ness
of your system is a security hole.

Well, honestly, I think it's quite likely that security scanners will not know of the debian versions and either:

	a) Always tag them as suspect (not fixing the original problem)
	b) Never tag them as suspect

For some reason, I fear the latter behavior.



Reply to: