Re: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security

To: debian-security@lists.debian.org, 130876@bugs.debian.org
Subject: Re: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
From: Wichert Akkerman <wichert@wiggy.net>
Date: Sun, 10 Feb 2002 20:46:43 +0100
Message-id: <[🔎] 20020210194643.GF23473@wiggy.net>
Mail-followup-to: debian-security@lists.debian.org, 130876@bugs.debian.org
In-reply-to: <[🔎] 15462.47945.344711.435377@rapun.sel.cam.ac.uk>
References: <20020126012313.320AD73061@phoenix.overdue.net> <15442.40996.468859.65980@rapun.sel.cam.ac.uk> <[🔎] 20020210024733.GA13568@overdue.ddts.net> <[🔎] 15462.47945.344711.435377@rapun.sel.cam.ac.uk>

Previously Matthew Vernon wrote:
> retitle 130876 Sending server software version information should be optional

I'm not sure I agree with that: that easily leads to the configurable
version response option that was discussed on openssh-dev recently where
it was concluded that is not a good idea.

Wichert.

-- 
  _________________________________________________________________
 /wichert@wiggy.net         This space intentionally left occupied \
| wichert@deephackmode.org            http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |

Reply to:

Follow-Ups:
- Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
  - From: Matthew Vernon <matthew@sel.cam.ac.uk>

References:
- Re: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
  - From: Lazarus Long <lazarus@overdue.ddts.net>
- Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
  - From: Matthew Vernon <matthew@sel.cam.ac.uk>

Prev by Date: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
Next by Date: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
Previous by thread: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
Next by thread: Bug#130876: ssh: -5 discloses too much infomation to an attacker, security
Index(es):
- Date
- Thread