Bug#222382: marked as done (ssh: warn user about a telnet session)
Your message dated Thu, 26 May 2005 14:32:58 +0100
with message-id <20050526133258.GH18019@riva.ucam.org>
and subject line Bug#222382: ssh: warn user about a telnet session
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at maintonly) by bugs.debian.org; 28 Nov 2003 12:27:12 +0000
>From pzn@terra.com.br Fri Nov 28 06:27:11 2003
Return-path: <pzn@terra.com.br>
Received: from 201-0-247-39.dial-up.telesp.net.br (mantis.autsens.localnet) [201.0.247.39]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1APhiI-0000I5-00; Fri, 28 Nov 2003 06:27:11 -0600
Received: from pzn by mantis.autsens.localnet with local (Exim 3.35 #1 (Debian))
id 1APhiG-000315-00; Fri, 28 Nov 2003 10:27:08 -0200
Date: Fri, 28 Nov 2003 10:27:08 -0200
From: Pedro Zorzenon Neto <pzn@terra.com.br>
To: Debian Bug Tracking System <maintonly@bugs.debian.org>
Subject: ssh: warn user about a telnet session
Message-ID: <20031128122708.GA11057@mantis.autsens.localnet>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.3.28i
X-Reportbug-Version: 1.50
Sender: Pedro Zorzenon Neto <pzn@terra.com.br>
Delivered-To: maintonly@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin
2.60-master.debian.org_2003_11_25-bugs.debian.org_2003_11_20
(1.212-2003-09-23-exp) on master.debian.org
X-Spam-Status: No, hits=-5.0 required=4.0 tests=HAS_PACKAGE autolearn=no
version=2.60-master.debian.org_2003_11_25-bugs.debian.org_2003_11_20
X-Spam-Level:
Package: ssh
Version: 1:3.4p1-1
Severity: wishlist
Hi Matthew,
I'd like ssh to send a warning message when I try to use it from
inside a telnet session. I don't know if this is a good solution, but
it is below (to be included in ssh "int main").
Thanks,
Pedro
/* telnetd sets variable REMOTEHOST, lets check it */
if (getenv("REMOTEHOST") != NULL) {
printf("*** WARNING *** you are using ssh from inside a "
"telnet session. Your password and data can be "
"sniffed easily.\n");
}
-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux mantis 2.4.18-686 #1 Sun Apr 14 11:32:47 EST 2002 i686
Locale: LANG=pt_BR, LC_CTYPE=pt_BR
Versions of packages ssh depends on:
ii adduser 3.47 Add and remove users and groups
ii debconf 1.2.35 Debian configuration management sy
ii libc6 2.3.2-7 GNU C Library: Shared libraries an
ii libpam-modules 0.72-35 Pluggable Authentication Modules f
ii libpam0g 0.76-14 Pluggable Authentication Modules l
ii libssl0.9.6 0.9.6c-2.woody.3 SSL shared libraries
ii libwrap0 7.6-9 Wietse Venema's TCP wrappers libra
ii zlib1g 1:1.1.4-1 compression library - runtime
---------------------------------------
Received: (at 222382-done) by bugs.debian.org; 26 May 2005 13:33:01 +0000
>From cjwatson@flatline.org.uk Thu May 26 06:33:01 2005
Return-path: <cjwatson@flatline.org.uk>
Received: from chiark.greenend.org.uk [193.201.200.170] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DbITt-0005Dw-00; Thu, 26 May 2005 06:33:01 -0700
Received: from [192.168.124.112] (helo=riva.lab.dotat.at)
by chiark.greenend.org.uk (Debian Exim 3.35 #1) with esmtp
(return-path cjwatson@flatline.org.uk)
id 1DbITr-0007IE-00
for 222382-done@bugs.debian.org; Thu, 26 May 2005 14:32:59 +0100
Received: from cjwatson by riva.lab.dotat.at with local (Exim 3.36 #1 (Debian))
for 222382-done@bugs.debian.org
id 1DbITq-0004it-00; Thu, 26 May 2005 14:32:58 +0100
Date: Thu, 26 May 2005 14:32:58 +0100
From: Colin Watson <cjwatson@debian.org>
To: 222382-done@bugs.debian.org
Subject: Re: Bug#222382: ssh: warn user about a telnet session
Message-ID: <20050526133258.GH18019@riva.ucam.org>
References: <20031128122708.GA11057@mantis.autsens.localnet> <20040121013550.GA13292@riva.ucam.org> <20040121112135.GA6785@mantis.autsens.localnet> <20050111013100.GE26924@riva.ucam.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050111013100.GE26924@riva.ucam.org>
User-Agent: Mutt/1.5.9i
Delivered-To: 222382-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
On Tue, Jan 11, 2005 at 01:31:00AM +0000, Colin Watson wrote:
> On Wed, Jan 21, 2004 at 09:21:35AM -0200, Pedro Zorzenon Neto wrote:
> > On Wed, Jan 21, 2004 at 01:35:50AM +0000, Colin Watson wrote:
> > > You're of course welcome to apply this to your local version of ssh, but
> > > I think it would do more harm than good to apply it to the version
> > > shipped by Debian.
> >
> > Hi Colin,
> >
> > Thanks for your explanation. After reading your comments, I also
> > think it is a bad idea to apply to the Debian package. I'll use it in
> > my local machine only, since some users unfortunatelly try ssh in a
> > telnet session...
>
> OK; closing, belatedly.
... and *really* closing now. :-)
--
Colin Watson [cjwatson@debian.org]
Reply to: