If you are currently using remote access via SSH, it might be a very
good idea to turn it (remote access) off for a while, due to a security
problem that has very recently been discovered in the SSH
implementation used in Mac OS X, FreeBSD, RedHat, Gentoo, and Debian
Unix. There is an attack being used out there that takes advantage of
the SSH exploit to gain root access to your machine.
To turn it off in OS-X, open System Preferences, click on the Sharing
tab, and make sure that Remote Login is turned off (unchecked).
If you just gotta have Remote Access on (or use SSH), then the
following url can give you information about how to upgrade to the
latest version of OpenSSH, which reportedly fixes the problem. If you
can afford to wait, then most likely Apple will have an update for the
rest of us.
Jerry
http://www.securityfocus.com/archive/1/337695
| The next meeting of the Louisville Computer Society will
| be September 23. The LCS Web page is <http://www.kymac.org>.
| This list's page is <http://erdos.math.louisville.edu/macgroup>.
