Re: Issue with openssh 3.5p1-6
From: Darren Tucker (dtucker_at_zip.com.au)
Date: Sat, 19 Nov 2005 10:50:19 +1100 To: Ashraf Eid <firstname.lastname@example.org>
On Fri, Nov 18, 2005 at 10:04:30AM +0300, Ashraf Eid wrote:
> My Linux server running Redhat 9 suddenly stopped accepting ssh connections!!!
> Server side debug output:
> # sshd -d 3
> debug: SshAppCommon/sshappcommon.c:154/ssh_app_get_global_regex_context: Allocating global SshRegex context.
> debug: SshConfig/sshconfig.c:2360/ssh2_parse_config: Configuration file is old-style. (1.0)
> debug: SshHostKeyIO/sshhostkeyio.c:220/ssh_host_key_read_keys: Host key algorithms: ssh-dss
I don't know what this debug is from but it's not OpenSSH. This is odd
because in the client debug you posted:
> Event Log: Server version: SSH-1.99-OpenSSH_3.5p1
Assuming these are in fact from the same connection, the only way I
can think of this being the case is 1) someone is MITM'ing your connection
or 2) someone has modified the ssh server to lie about what it is.
The server appears to be segfaulting (the sig 11) but the reason for this
is anyone's guess...
-- Darren Tucker (dtucker at zip.com.au) GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4 37C9 C982 80C7 8FF4 FA69 Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.