Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy]

[Valdis . Kletnieks]

On Mon, 27 Sep 1999 11:35:44 EDT, Dan Astoorian <[EMAIL PROTECTED]>  said:
> A trivial demo program that demonstrates the problem is attached.  (It
> needs no special privileges; run it as an unprivileged user in any
> writable directory.)  The program reports "okay" under Solaris 2.5.1 and
> IRIX 6.5.2, "vulnerable" under RedHat 6.

AIX 4.3.2 with all the recent Fixdist patches also says "okay".

                                Valdis Kletnieks
                                Computer Systems Senior Engineer
                                Virginia Tech