From owner-freebsd-security  Tue Aug  6  5: 7:37 2002
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EF47D37B400
	for <freebsd-security@freebsd.org>; Tue,  6 Aug 2002 05:07:34 -0700 (PDT)
Received: from web20110.mail.yahoo.com (web20110.mail.yahoo.com [216.136.226.47])
	by mx1.FreeBSD.org (Postfix) with SMTP id 7C84D43E75
	for <freebsd-security@freebsd.org>; Tue,  6 Aug 2002 05:07:34 -0700 (PDT)
	(envelope-from freefabri@yahoo.it)
Message-ID: <20020806120734.76242.qmail@web20110.mail.yahoo.com>
Received: from [193.227.212.160] by web20110.mail.yahoo.com via HTTP; Tue, 06 Aug 2002 14:07:34 CEST
Date: Tue, 6 Aug 2002 14:07:34 +0200 (CEST)
From: =?iso-8859-1?q?Fabrizio=20Ravazzini?= <freefabri@yahoo.it>
Subject: Re: OpenSSh trojan on fbsd 4.5
To: Kevin Golding <kevin@caomhin.demon.co.uk>
Cc: freebsd-security@freebsd.org
In-Reply-To: <nn1d64BYq7T9EwjA@caomhin.demon.co.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Ok thanks for the help
Bye 
--- Kevin Golding <kevin@caomhin.demon.co.uk> ha
scritto: > Someone, quite probably Fabrizio Ravazzini,
once
> wrote:
> >Hello all I've installed a server on Freebsd 4.5
> >Stable.
> >I know that latest versions of OpenSSH, such
> 3.2.2p1
> >3.4p1 and 3.4 are trojaned.
> >I think that Openssh on my system  is something
> like
> >3.0.2, is that right?
> 
> 2.9 iirc
> 
> ssh -V will tell you accurately.
> 
> >Or, is the version of ssh in my box trojaned?
> >Thanx bye
> 
> Basically you were only at risk if you installed a
> later version
> deliberately, and if you did that from ports you
> would have still needed
> to explicitly tell the install to ignore certain
> security checks.
> 
> Basically a default install is unaffected.
> 
> Kevin
> -- 
> kevin@caomhin.demon.co.uk
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of
> the message 

______________________________________________________________________
Scarica il nuovo Yahoo! Messenger: con webcam, nuove faccine e tante altre novità.
http://it.yahoo.com/mail_it/foot/?http://it.messenger.yahoo.com/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message