Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread Michael Edenfield
* William Michael Grim [EMAIL PROTECTED] [030916 14:46]: What the hell are you talking about? Thanks for not giving us any info about your problem. I suspect he means: http://www.securityfocus.com/archive/1/337662/2003-09-13/2003-09-19/0 --Mike

RE: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread Don Bowman
From: Josh Brooks [mailto:[EMAIL PROTECTED] 1. What is the workaround for this issue ? Be creative. Not everyone can update their userland in a normal fashion - and no, I won't sit here and justify that statement. Think embedded systems. 2. Is there really an exploit in the wild ?

Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread David Raistrick
On Tue, 16 Sep 2003, William Michael Grim wrote: What the hell are you talking about? Thanks for not giving us any info about your problem. He appears to have made a basic assumption that the readers of -hackers would subscribe to security-advisories as well. FreeBSD Security Advisory

Re: OpenSSH flaw #23515 - what is the workaround, and is there an exploit ?

2003-09-16 Thread Brandon D. Valentine
On Tue, Sep 16, 2003 at 01:45:42PM -0500, William Michael Grim wrote: What the hell are you talking about? Thanks for not giving us any info about your problem. I think he was assuming that we were all aware of the OpenSSH exploit that was just announced. Mr. Brooks would do well to read