Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Sep 2003 13:45:00 -0500
From:      "Jacques A. Vidrine" <nectar@FreeBSD.org>
To:        Brett Glass <brett@lariat.org>
Cc:        freebsd-security@freebsd.org
Subject:   Re: OpenSSH heads-up
Message-ID:  <20030916184500.GD6723@madman.celabo.org>
In-Reply-To: <4.3.2.7.2.20030916123558.02cfdef0@localhost>
References:  <20030916134347.GA30359@madman.celabo.org> <4.3.2.7.2.20030916123558.02cfdef0@localhost>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Sep 16, 2003 at 12:41:14PM -0600, Brett Glass wrote:
> Could it be that some party or parties knew about this before the
> announcement and is probing for hosts to exploit?

There have been rumours of an ssh2 exploit for over a week.  The
first concrete indication that I received that there was a bug was an
OpenBSD commit message last night.

Cheers,
-- 
Jacques Vidrine   . NTT/Verio SME      . FreeBSD UNIX       . Heimdal
nectar@celabo.org . jvidrine@verio.net . nectar@freebsd.org . nectar@kth.se



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030916184500.GD6723>