RE: SSH accepts protocol version 1.99

From: Bennett R. Samowich (brs_at_fsproduce.com)
Date: 08/19/03

  • Next message: Ben Ricker: "Re: SSH accepts protocol version 1.99" 
    Date: Tue, 19 Aug 2003 17:01:46 -0400
To: "shawnmer" <shawnmer@io.com>

    Seems to be on a couple of versions

    OpenSSH 3.6p1
              3.5p1

    RedHat 2.4.18
           2.2.16

    -----Original Message-----
    From: shawnmer [mailto:shawnmer@io.com]
    Sent: Tuesday, August 19, 2003 4:28 PM
    To: Bennett R. Samowich
    Subject: Re: SSH accepts protocol version 1.99

    Hi,

    Version? Vendor? Platform?

    -scm

    BRS:Bennett R. Samowich

    BRS>Greets,
    BRS>
    BRS>During an audit we discovered that our SSH daemons allowed protocols

    BRS>1.99 and 2.0. We have the line "Protocol 2" in the config file
    BRS>which I thought would cause sshd to only allow protocol 2.0.
    BRS>
    BRS>Is this true or am I missing something else?
    BRS>
    BRS>Thanks in advance,
    BRS>- Bennett
    BRS>

  • Next message: Ben Ricker: "Re: SSH accepts protocol version 1.99"

    Relevant Pages

    • [NEWS] SSH Protocol Weakness Vulnerability (MITM)
      ... A weakness in the backward compatibility of the SSH Protocol has been ... SSH version 1.0) is unlikely to have the host key for the other protocol ... The SSH daemons advertise one of two major versions, ...
      (Securiteam)
    • SUMMARY: SSH 2.5.2p2 on Tru64 4.0g
      ... SSH is very particular about the permissions on the $HOME/.ssh ... Always pay particular attention the the ssh SERVERs protocol usage. ... when only using the identity.pub or rsa key. ... file on the remote host to reflect the host name without domain that was ...
      (Tru64-UNIX-Managers)
    • Re: SOCKS 5 protocol & sysadmin
      ... bypassing proxy settings using SOCKS 5 protocol? ... example SSH he can tunnel almost any TCP protocol into it and you will ... By the way, Even without SSH access, Any other opened port can be used ...
      (comp.os.linux.security)
    • Re: Where do the random numbers come from?
      ... I'll look into ssh... ... >>just using an established protocol is that resources on my client are ... > the server is convinced of your identity, a malicious attacker in ... >>Of course you can seed the BouncyCastle random number generator with ...
      (comp.security.ssh)
    • Re: how to react on ssh attacks?
      ... > I recently checked my log files of my ssh service (so far as I ... these attacks will get more sophisticated as time goes on - the ... Protocol 2,1 line in /etc/ssh/sshd_config to say Protocol 2 and then ... Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org ...
      (Fedora)