> OpenSSH??? I use this product extensively, and while there have been > a few problems discovered, for the most part it seems very secure, do > you have something to add to your earlier statement?
I don't know for sure what this individual was referring to, but OpenSSH prior to the 3.4 release had quite a few security bugs. This prompted the OpenSSH team to perform another security audit, after which, version 3.4 was released. Also, since privilege separation was added, it reduces that chance of a bug will result in a remote root compromise (if used). I don't recall any serious problems having been found in it since version 3.4 was released in Sept of 2002. It's still better than relying on telnet, or other unencrypted communications for remote management. Steve Bremer NEBCO, Inc. System & Security Administrator --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ----------------------------------------------------------------------------