On Thu, Sep 18, 2003 at 11:51:28AM +0100, Colin Watson wrote: > On Thu, Sep 18, 2003 at 05:35:48AM -0500, Ron Johnson wrote: > > There have been so many critical bugs in OpenSSH, I'm looking for > > something else. > > It's worth remembering that the OpenSSH bugs of the moment are getting > down to the incredibly picky. As I understand it (which isn't > completely), the current lot allow you to write some zeroes into an area > of memory partly of your choosing. Less prominent SSH implementations > almost certainly have just as many hard-to-find and hard-to-exploit bugs > but less attention is being paid to them so they haven't been found yet. Bennett Todd mentioned it on F-D but it also has it's bugs (as he mentioned a few posts later). So ATM there doesn't seem to be good alternative.
Sven -- http://www.comboguano.de http://sven.linux-ist-pleite.de I'm root, if you see me laughing you better have a backup! -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
