OpenSSH anomaly
From: Benjamin Franz (snowhare_at_nihongo.org)
Date: 02/22/04
- Previous message: Access Denied: "Re: buddylinks worm"
- Next in thread: Paul Schmehl: "Re: OpenSSH anomaly"
- Reply: Paul Schmehl: "Re: OpenSSH anomaly"
- Reply: Mike Hoskins: "Re: OpenSSH anomaly"
- Maybe reply: AJ Cochenour: "FW: OpenSSH anomaly"
- Reply: Will Tipton: "Re: OpenSSH anomaly"
- Reply: Honza Vlach: "Re: OpenSSH anomaly"
- Reply: Tavis Paquette: "Re: OpenSSH anomaly"
- Maybe reply: GUSAIN,SUBODH (HP-Canada,ex1): "RE: OpenSSH anomaly"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 22 Feb 2004 09:45:27 -0800 (PST) To: incidents@securityfocus.com
I'm running a RedHat Enterprise 3 ES server that has been running fairly
reliably for a month. This morning we could not remotely login to the
server via SSH because openssh would terminate the connection immediately
(no delay) after apparently successfully logging in - without giving a
prompt. We are current on patches up to Feb 1 with the exception of the
kernel which is RHES 2.4.21-4.0.1.ELsmp. A console reboot succeeded in
restoring connectivity. We couldn't find any footprints in any log or any
suspicious file activity. No record of the failed logins (we attempted
using both pubkey and password) were in the logs. The openssh version is
RedHat's 3.6.1p2-18.
Has anyone else seen something similiar?
--
Benjamin Franz
On that of which one cannot speak, one must remain silent.
---Wittgenstein
---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection
Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.
Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.
Download 30-day evaluation at:
http://www.securityfocus.com/sponsor/Astaro_incidents_040219
----------------------------------------------------------------------------
- Previous message: Access Denied: "Re: buddylinks worm"
- Next in thread: Paul Schmehl: "Re: OpenSSH anomaly"
- Reply: Paul Schmehl: "Re: OpenSSH anomaly"
- Reply: Mike Hoskins: "Re: OpenSSH anomaly"
- Maybe reply: AJ Cochenour: "FW: OpenSSH anomaly"
- Reply: Will Tipton: "Re: OpenSSH anomaly"
- Reply: Honza Vlach: "Re: OpenSSH anomaly"
- Reply: Tavis Paquette: "Re: OpenSSH anomaly"
- Maybe reply: GUSAIN,SUBODH (HP-Canada,ex1): "RE: OpenSSH anomaly"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]