From owner-freebsd-security  Thu Nov 22  7:44:30 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.interchange.ca (ns.interchange.ca [216.126.79.2])
	by hub.freebsd.org (Postfix) with ESMTP id BBC9437B405
	for <freebsd-security@FreeBSD.ORG>; Thu, 22 Nov 2001 07:44:27 -0800 (PST)
Received: by mail.interchange.ca (Fastmailer, from userid 555)
	id 636D61FBA; Thu, 22 Nov 2001 10:43:56 -0500 (EST)
MIME-Version: 1.0
Message-Id: <3BFD1D3C.000003.54439@frodo.searchcanada.ca>
Content-Type: Multipart/Mixed;
  boundary="------------Boundary-00=_81L7ULUXFQQMYJ0CCJD0"
To: fernan@iib.unsam.edu.ar
Subject: Re: Odd sshd messages
Cc: freebsd-security@FreeBSD.ORG
From: "Michael Richards" <michael@fastmail.ca>
X-Fastmail-IP: 24.43.130.241
Date: Thu, 22 Nov 2001 10:43:56 -0500 (EST)
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


--------------Boundary-00=_81L7ULUXFQQMYJ0CCJD0
Content-Type: Text/Plain
Content-Transfer-Encoding: 7bit

If this is the case and I'm running a non-vulnerable 2.3.0 version 
then why do I get these messages?

-Michael

> This is documented at
> http://www.cert.org/incident_notes/IN-2001-12.html
>
> Quoting it:
>
> Exploitation of vulnerability in SSH1 CRC-32 compensation attack
> detector 	Original release Date: November 5, 2001
> 	Last revised: November 7, 2001
<SNIP>
_________________________________________________________________
     http://fastmail.ca/ - Fast Free Web Email for Canadians
--------------Boundary-00=_81L7ULUXFQQMYJ0CCJD0--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message