Re: Analysis of SSH crc32 compensation attack detector exploit

From: Dave Dittrich (dittrich@cac.washington.edu)
Date: 11/14/01 

Date: Wed, 14 Nov 2001 10:21:49 -0800 (PST)
From: Dave Dittrich <dittrich@cac.washington.edu>
To: BUGTRAQ@securityfocus.com, Incidents Mailing List <INCIDENTS@securityfocus.com>, <unisog@sans.org>
Subject: Re: Analysis of SSH crc32 compensation attack detector exploit
Message-ID: <Pine.LNX.4.40.0111131844400.27957-100000@shiva0.cac.washington.edu>

On Thu, 8 Nov 2001, Dave Dittrich wrote:

> ==========================================================
> Analysis of SSH crc32 compensation attack detector exploit
> ==========================================================

I received comments from a number of people about identification
of "affected" SSH servers. One such message is here: