http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20584
I just read this over at iss, it seems that the vuln only exists for default installations of BSD and only for S-KEY and BSD authentication. So need to upgrade at all.. its just a way to get everyone over to 3.x i guess... With kind regards, Wim Fournier -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]