From owner-freebsd-security Wed Nov 4 11:07:21 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA13759 for freebsd-security-outgoing; Wed, 4 Nov 1998 11:07:21 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA13754 for ; Wed, 4 Nov 1998 11:07:20 -0800 (PST) (envelope-from cschuber@uumail.gov.bc.ca) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.9.1/8.8.8) id LAA31825 for ; Wed, 4 Nov 1998 11:07:11 -0800 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda31823; Wed Nov 4 11:07:08 1998 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.9.1/8.9.1) id LAA28962 for ; Wed, 4 Nov 1998 11:07:08 -0800 (PST) Message-Id: <199811041907.LAA28962@passer.osg.gov.bc.ca> Received: from localhost.osg.gov.bc.ca(127.0.0.1), claiming to be "passer.osg.gov.bc.ca" via SMTP by localhost.osg.gov.bc.ca, id smtpdv28955; Wed Nov 4 11:06:20 1998 X-Mailer: exmh version 2.0.2 2/24/98 Reply-to: Cy Schubert - ITSD Open Systems Group X-Sender: cschuber To: freebsd-security@FreeBSD.ORG Subject: Re: SSHD Exploit Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Wed, 04 Nov 1998 11:06:20 -0800 From: Cy Schubert Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org It is normally against my policy to forward posts from one mailing list to another, however this should answer some of the questions cause by a previous "cross post" from BUGTRAQ. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Open Systems Group Internet: cschuber@uumail.gov.bc.ca ITSD Cy.Schubert@gems8.gov.bc.ca Government of BC ------- Forwarded Message Return-Path: owner-bugtraq@netspace.org Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.9.1/8.9.1) id JAA24588 for ; Wed, 4 Nov 1998 09:44:46 -0800 (PST) Received: from point.osg.gov.bc.ca(142.32.102.44) via SMTP by passer.osg.gov.bc.ca, id smtpdq24585; Wed Nov 4 09:43:47 1998 Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.9.1/8.8.8) id JAA31567 for ; Wed, 4 Nov 1998 09:43:34 -0800 Received: from brimstone.netspace.org(128.148.157.143) via SMTP by point.osg.gov.bc.ca, id smtpda31565; Wed Nov 4 09:43:18 1998 Received: from netspace.org ([128.148.157.6]:10872 "EHLO netspace.org" ident: "TIMEDOUT2") by brimstone.netspace.org with ESMTP id <77546-30278>; Wed, 4 Nov 1998 12:38:10 -0500 Received: from NETSPACE.ORG by NETSPACE.ORG (LISTSERV-TCP/IP release 1.8c) with spool id 4640495 for BUGTRAQ@NETSPACE.ORG; Wed, 4 Nov 1998 12:31:03 -0500 Approved-By: aleph1@DFW.NET Received: from dfw.nationwide.net (dfw.nationwide.net [198.175.15.10]) by netspace.org (8.8.7/8.8.7) with ESMTP id MAA08242 for ; Wed, 4 Nov 1998 12:25:01 -0500 Received: from localhost (aleph1@localhost) by dfw.nationwide.net (8.9.0/8.9.0) with SMTP id LAA15322 for ; Wed, 4 Nov 1998 11:22:09 -0600 (CST) X-Sender: aleph1@dfw.nationwide.net MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Message-ID: Date: Wed, 4 Nov 1998 11:22:08 -0600 Reply-To: Aleph One Sender: Bugtraq List From: Aleph One Subject: Re: SSHD Exploit To: BUGTRAQ@netspace.org This one was a fake folks. Little kids having their fun. Apologies for approving it. It was a long day. All persons that have examined the ssh code so far have found it to be secure (so far). If you require a safety net to sleep well at night while running sshd I recommend you recompile it with the StackGuard compiler (if you are running on a x86 or want to port it). http://www.cse.ogi.edu/DISC/projects/immunix/StackGuard/ Aleph One / aleph1@dfw.net http://underground.org/ KeyID 1024/948FD6B5 Fingerprint EE C9 E8 AA CB AF 09 61 8C 39 EA 47 A8 6A B8 01 ------- End of Forwarded Message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message