Re: SSH and the zlib double-free vulnerability

From: Derek Lee (dkklee@earthling.net)
Date: 03/29/02


From: Derek Lee <dkklee@earthling.net>
Date: Thu, 28 Mar 2002 23:59:28 +0000

We have been told by ssh.com that their software as it is compiled is not
affected by this vulnerability.

I am afraid I got this info while I was away and have since lost the email
explaining the technical details..

-Derek



Relevant Pages

  • Re: [Full-Disclosure] RE: Disclosure policy in Re: RealPlayer vulnerabilities
    ... you wrote that I do not really believe in "full disclosure" ... Vulnerability is discovered and the vendor is notified. ... vulnerability’s technical details are disclosed. ... determination and resources of the attacker, ...
    (NT-Bugtraq)
  • [Full-disclosure] LLSSRV Clarifications from Immunity
    ... public website regarding the technical details of the llssrv ... LLSSRV is not remotely exploitable on Windows ... 2000 Server SP3 and 4 without authentication. ... Further details, vulnerability release scheduling, and other information ...
    (Full-Disclosure)
  • Re: [VulnWatch] Details of Sybase ASE bugs withheld
    ... Sybase is threatening "something" ... so that the technical details of the vulnerability are kept secret ...
    (Bugtraq)
  • Re: [Full-disclosure] The newest Word flaw is due to malformed data structure handling
    ... And without any reasonable technical details it is very difficult to give a title field for the vulnerability. ... Several advisories using titles like Word Unspecified Code Execution Vulnerability or Word Code Execution Vulnerability #2, #3 are not the trend we want. ... Repeating this statement for every Word bug doesn't tell us anything new. ...
    (Full-Disclosure)
  • Re: The newest Word flaw is due to malformed data structure handling
    ... And without any reasonable technical details it is very difficult to give a title field for the vulnerability. ... Several advisories using titles like Word Unspecified Code Execution Vulnerability or Word Code Execution Vulnerability #2, #3 are not the trend we want. ... Repeating this statement for every Word bug doesn't tell us anything new. ...
    (Bugtraq)