Re: ssh-1.2.27 remote buffer overflow - exploitable (VD#7)

[Markus Friedl]

On Sun, Nov 14, 1999 at 12:42:23PM +0200, Ville Herva wrote:
> This just came up on Bugtraq. 
> 
> > Debian is immune for the (somewhat messy) reasons that they do not link
> > ssh to rsaref, last time that I checked.

please note that OpenSSH is immune, too.
OpenSSH does not use rsaglue.c but openssl.
-markus