security hole in sshd in oldstable?

2005-08-24 Thread Petter Reinholdtsen
Are there known security holes in sshd in oldstable (woody)? Yesterday, I was told that one of the machines I administrate were rooted, and that this was the springboard used to crack the reporters machine. He was told this on IRC by the person claiming to do the breakin. The person breaking in

Re: security hole in sshd in oldstable?

2005-08-24 Thread Aldous Penaranda
On Wed, 24 Aug 2005 12:07:00 +0200, Petter Reinholdtsen wrote: Are there known security holes in sshd in oldstable (woody)? A quick bug search gave me this: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=196413 It's tagged security and wontfix for woody. Maybe the cracker used this to find

Re: security hole in sshd in oldstable?

2005-08-24 Thread Il_Corvo
pheraps used a bruteforce ? Was your password a simple WORD or a word less than 6 chars ? - Original Message - From: Petter Reinholdtsen [EMAIL PROTECTED] To: debian-security@lists.debian.org Sent: Wednesday, August 24, 2005 12:07 PM Subject: security hole in sshd in oldstable

Re: security hole in sshd in oldstable?

2005-08-24 Thread Javier Fernández-Sanguino Peña
On Wed, Aug 24, 2005 at 06:14:59PM +0800, Aldous Penaranda wrote: On Wed, 24 Aug 2005 12:07:00 +0200, Petter Reinholdtsen wrote: Are there known security holes in sshd in oldstable (woody)? A quick bug search gave me this: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=196413 It's