On Tue, Jan 23, 2001 at 09:16:33 +0000, Stuart Auchterlonie <sauchter@foxboro.com> wrote: [...] > This is in the BTS as bug #79106 and seems to bite anyone who is > using passwd authentication with ssh 1.2.3-9.1 that the security team > released for potato. IBTD. lust.cluon.priv.at is a SS10 running potato+security fixes with pam_unix (= passwd?) authentication: : 12 mike@joy:->ssh -v mike@lust.cluon.priv.at : SSH Version OpenSSH-1.2.3, protocol version 1.5. : Compiled with SSL. : debug: Reading configuration data /home/adm/mike/.ssh/config : debug: Reading configuration data /etc/ssh/ssh_config : debug: Applying options for * : debug: ssh_connect: getuid 1000 geteuid 1000 anon 1 : debug: Connecting to lust.cluon.priv.at [193.83.27.126] port 22. : debug: Connection established. : debug: Remote protocol version 1.5, remote software version OpenSSH-1.2.3 : debug: Waiting for server public key. : debug: Received server public key (768 bits) and host key (1024 bits). : debug: Host 'lust.cluon.priv.at' is known and matches the host key. : debug: Encryption type: 3des : debug: Sent encrypted session key. : debug: Installing crc compensation attack detector. : debug: Received encrypted confirmation. : debug: Doing password authentication. : mike@lust.cluon.priv.at's password: : debug: Requesting pty. : debug: Requesting shell. : debug: Entering interactive session. : mike@lust:~$ dpkg -l ssh : Desired=Unknown/Install/Remove/Purge/Hold : | Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed : |/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: ...) : ||/ Name Version Description : +++-==============-==============-============================================ : ii ssh 1.2.3-9.1 Secure rlogin/rsh/rcp replacement (OpenSSH) : mike@lust:~$ we could compare lust.cluon.priv.at to your machine to see what is different between our systems. -- Thomas 'Mike' Michlmayr | ignorami: n: The BOFH art of folding problem <mike+sig@cluon.priv.at> | lusers into representational shapes.
Attachment:
pgpCg1QTrF4KF.pgp
Description: PGP signature