[VulnWatch] Proof of Concept Code for OpenSSH

From: gobbles@hushmail.com
Date: 07/01/02 

From: gobbles@hushmail.com
To: submissions@packetstormsecurity.com, vulnwatch@vulnwatch.org, bugtraq@securityfocus.com, alan@redhat.com, jesus@jesus.com, dugsong@monkey.org
Date: Mon,  1 Jul 2002 10:32:00 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Remote OpenSSH exploit for 2.9.9-3.3.

Check out our official mirror while we work on the bugtraq.org hosting situation, http://www.immunitysec.com/GOBBLES/ (thanks bob!), we have a new comic posted and some other miscellaneous stuff.

If you haven't patched your sshd yet, you're probably running OpenBSD.

- -GOBBLES Security
"For the love of God, we won't shut up."
-----BEGIN PGP SIGNATURE-----
Version: Hush 2.1
Note: This signature can be verified at https://www.hushtools.com

wlwEARECABwFAj0gkUAVHGdvYmJsZXNAaHVzaG1haWwuY29tAAoJEBzRp5chmbAP6S0A
n3e3SbTXYt8NbFeKFGcw5tK5Kjk0AKCiOBoaEu/hQ7ryuaJO3KZIB9ae+w==
=X4Ou
-----END PGP SIGNATURE-----

Relevant Pages

  • Proof of Concept Code for OpenSSH
    ... If you haven't patched your sshd yet, you're probably running OpenBSD. ... - -GOBBLES Security ... "For the love of God, ...
    (Bugtraq)
  • Re: SSHD revelaing too much information.
    ... He *is* the FreeBSD Security Officer. ... you still need to be sure that students' machines don't get ... client can activate a workaround when it connects to a broken sshd. ...
    (FreeBSD-Security)
  • Re: SSHD reconfig
    ... run sshd on some port other than 22, ... Multiple layers of security are better. ... Apple, you mangled it. ...
    (comp.sys.mac.system)
  • Re: Adacrypt.com - Article
    ... it would immediately turn the ... It is no security to wicked men for one moment, ... Unconverted men walk over the pit of hell on a rotten ... God has so many different unsearchable ways of taking ...
    (sci.crypt)
  • Re: starting ssh from inetd
    ... which tends to enhance security. ... >security hole in a particular implementation of inetd, ... Are you saying sshd is insecure when running stand alone and that it ... running sshd through inetd does not simplify the programming ...
    (comp.security.ssh)
Quantcast