FWIW, on the advisory itself, an OpenSSH author states,
"From my testing it seems that the current version of OpenSSH (3.5)
is not vulnerable to these problems, and some limited testing shows
that no version of OpenSSH is vulnerable."

-- 
Regards,
Doug

Stacey Roberts said:
> This just landed in my Inbox.
>
> Figured the list might like to be aware of this:
>
> Multiple vendors' SSH transport layer protocol implementations
> contain vulnerabilities in key exchange and initialization
>
> http://www.kb.cert.org/vuls/id/389665
>
>
> Regards,
> Stacey
> --
> Stacey Roberts
> B.Sc (HONS) Computer Science
>
> Web: www.vickiandstacey.com
>
>
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message




To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to