Re: bash vulnerability jessie

[Ross Boylan <rossboylan@stanfordalumni.org>]

On Fri, Sep 26, 2014 at 9:12 AM, The Wanderer <wanderer@fastmail.fm> wrote:
....
>
> But almost every Debian install includes at least a SSH server, and if
> you haven't gone out of your way to arrange otherwise, it can probably
> be reached from the outside Internet by someone who knows the correct IP
> address.

Is ssh vulnerable if the outsider can't login?

Ross Boylan
>
> (Exactly which outside-accessible services do and don't expose the
> vulnerability isn't very clear at the moment AFAIK, so it's better to
> err on the safe side and assume they all do until evidence one way or
> the other can be found.)
>
> - --
>    The Wanderer
>