[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Sniffing SSH and HTTPS



On Tue, Aug 28, 2001 at 06:44:59PM +0200, Davy Gigan wrote:
> Jan-Hendrik Palic writes:
>  > http://ettercap.sourceforge.net/
>  > 
>  > Is it possible? Are SSH und HTTPS connections unsecure and how do we
>  > make is secure than?
> 
> old ssh protocol v1.5 IS a security hole, you can snif it. I don't know any vulnerability
> for the last OpenSSH_2.9p2 or OpenSSH_2.5.2p2 (which is last in debian security's updates)

wrong, the latest ssh in debian's security updates (thus for potato)
is Version: 1:1.2.3-9.3

the latest in unstable is 2.9p2, testing (woody) has 2.5.2p2, these
are unreleased versions of debian though.

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgpFI6dZohMTc.pgp
Description: PGP signature


Reply to: