Re: Newest OpenSSH advisory

2003-09-24 Thread Matt Zimmerman
On Wed, Sep 24, 2003 at 12:12:54PM +0300, Riku Anttila wrote: > According to http://www.openssh.com/txt/sshpam.adv there are multiple > vulnerabilities in the "new PAM code of Portable OpenSSH". > > It sounds as if it's limited to versions 3.7p1 and3.7.1p1, but I thought > I'd ask if anyone kno

Re: Newest OpenSSH advisory

2003-09-24 Thread Matt Zimmerman
On Wed, Sep 24, 2003 at 12:12:54PM +0300, Riku Anttila wrote: > According to http://www.openssh.com/txt/sshpam.adv there are multiple > vulnerabilities in the "new PAM code of Portable OpenSSH". > > It sounds as if it's limited to versions 3.7p1 and3.7.1p1, but I thought > I'd ask if anyone kno

Re: Newest OpenSSH advisory

2003-09-24 Thread Ramon Kagan
My understanding and look at the changelog is that there has been a significant amount of work in the pam components of openssh from version 3.6.x to 3.7x. It is this new code, that has the vulnerability. Ramon Kagan York University, Computing and Network Services Unix Team - Senior Unix Systems

Re: Newest OpenSSH advisory

2003-09-24 Thread Ramon Kagan
My understanding and look at the changelog is that there has been a significant amount of work in the pam components of openssh from version 3.6.x to 3.7x. It is this new code, that has the vulnerability. Ramon Kagan York University, Computing and Network Services Unix Team - Senior Unix Systems

Newest OpenSSH advisory

2003-09-24 Thread Riku Anttila
According to http://www.openssh.com/txt/sshpam.adv there are multiple vulnerabilities in the "new PAM code of Portable OpenSSH". It sounds as if it's limited to versions 3.7p1 and3.7.1p1, but I thought I'd ask if anyone knows for a fact that the older version in Woody does not have this code.

Newest OpenSSH advisory

2003-09-24 Thread Riku Anttila
According to http://www.openssh.com/txt/sshpam.adv there are multiple vulnerabilities in the "new PAM code of Portable OpenSSH". It sounds as if it's limited to versions 3.7p1 and3.7.1p1, but I thought I'd ask if anyone knows for a fact that the older version in Woody does not have this code.