https://bugzilla.mindrot.org/show_bug.cgi?id=1950

--- Comment #2 from Darren Tucker <[email protected]> 2011-11-13 13:10:15 EST 
---
It tries to bind to IPv6 because getaddrinfo tells it to, even though
bind will never work.

Unfortunately, your patch reintroduces the problem described in
CVE-2008-1483.  As a workaround you can set AddressFamily inet in
sshd_config, or fix getaddrinfo.

See:
http://marc.info/?l=openssh-unix-dev&m=123378783531913&w=2
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to