Re: [ILUG] openssh vulnerability

From: Rick Moen (rick at domain linuxmafia.com)
Date: Wed 26 Jun 2002 - 01:39:22 IST


Quoting John Madden (maddenj at domain skynet.ie):

> add deb http://security.debian.org/ testing/updates main contrib non-free
> to /etc/apt/sources.list. apt-get install ssh then added:
> UsePrivilegeSeparation yes
> Compression no
>
> to /etc/ssh/sshd_config
>
> Only problem I've come across so far is that most of the users have ssh1
> keys generated for accessing mail on another server in the network and
> 3.3 doesn't seem to support it (at least that's what I think the problem
> is, not having looked too deeply into it yet). Other than that, no
> upsets yet.

Well, I haven't yet tested using either RSA or DSA keypairs, but
version-1.5 protocol support definitely is OK (per my tests using
"ssh -v -1 hostname". I'll test using keypairs next, I guess.

What a pain in the neck this is turning out to be, eh?

-- 
Cheers,   The difference between common sense and paranoia is that common sense
Rick Moen     is thinking everyone is out to get you.  That's normal; they are.
rick at domain linuxmafia.com      Paranoia is thinking they're conspiring.  -- J. Kegler


This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:17:32 GMT