As i have read on this page :
http://secer.org/hacktools/0day-openssh-remote-exploit.html<http://secer.org/hacktools/0day-openssh-remote-exploit.html>it
say's that the attack is againt OpenSSH version 4.3.

So the best thing that you can do is update OpenSSH to a newer version.

But again it are still rumors and i don't know if a version higher then 4.3
is also attackable by the exploit


2009/7/7 Ramunas / techsupport.lt <[email protected]>

> Hi all,
>
> This is a serious security threat if it is not some sort of a duck (as we
> call it in our country). I have firewalled some servers already.
>
> Do you think tcpwrapping ssh service is enough, or should i use iptables
> instead?
>
> Thanks in advance,
> Regards
>
> --
> Ramūnas Čereškevičius
>
> Tel.:  +370 600 48 371
> El.p.: [email protected]
>
> * UNIX/Linux serveriai
> * Kompiuterių tinklai
> * Internetinių svetainių kūrimas
> * Konsultacijos
>
> www.techsupport.lt
>
>
>
> --
> To UNSUBSCRIBE, email to [email protected]
> with a subject of "unsubscribe". Trouble? Contact
> [email protected]
>
>

Reply via email to