Re: FreeBSD Security Advisory FreeBSD-SA-06:22.openssh

Theo de Raadt wrote:
The OpenSSH project believe that the race condition can lead to a Denial
of Service or potentially remote code execution
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Bull***. Where did anyone say this?

The OpenSSH 4.4 release announcement says that, actually:

* Fix an unsafe signal hander reported by Mark Dowd. The signal
handler was vulnerable to a race condition that could be exploited
to perform a pre-authentication denial of service. On portable
OpenSSH, this vulnerability could theoretically lead to
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
pre-authentication remote code execution if GSSAPI authentication
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
is enabled, but the likelihood of successful exploitation appears
remote.

Colin Percival
_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"