From owner-freebsd-questions Fri Nov 13 06:35:41 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA13061 for freebsd-questions-outgoing; Fri, 13 Nov 1998 06:35:41 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from caladan.tdx.co.uk (caladan.tdx.co.uk [195.188.177.4]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA13051 for ; Fri, 13 Nov 1998 06:35:38 -0800 (PST) (envelope-from kpielorz@tdx.co.uk) Received: from tdx.co.uk (lorca-tx.tdx.co.uk [195.188.177.242]) by caladan.tdx.co.uk (8.9.1a/8.9.1) with ESMTP id OAA20921; Fri, 13 Nov 1998 14:34:38 GMT Message-ID: <364C437D.AD1CA8D0@tdx.co.uk> Date: Fri, 13 Nov 1998 14:34:37 +0000 From: Karl Pielorz Organization: TDX - The Digital eXchange X-Mailer: Mozilla 4.5 [en] (WinNT; I) X-Accept-Language: en MIME-Version: 1.0 To: Steve Hovey CC: Willow , freebsd-questions@FreeBSD.ORG Subject: Re: ssh/sshd questions References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Steve Hovey wrote: > > All I know is about a year ago, the day after I installed it, I suffered a > root incursion. > > On Thu, 12 Nov 1998, Willow wrote: > > > I just installed ssh/sshd from 2.2.7 ports, and seem to rememeber a > > security announcement regarding it. Does anyone remember such an > > announcement? > > > > Also where is the best place to look for FreeBSD related security > > announcements that have been posted to freebsd-security and > > freebsd-security-notifacations? ssh is a port for FreeBSD, I think FreeBSD-Security only deals with problems in the kernel / core distribution files (which SSH is not)... There has been a lot of hype about ssh recently, try www.rootshells.com as a good starting place... The last I heard was that there is a 'known' potential problem with running SSH compiled on certain versions of Linux with Kerberos support, but I'm not claiming to be the authority on it... Regards, Karl To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message