From owner-freebsd-security Thu Nov 22 13:52: 7 2001 Delivered-To: freebsd-security@freebsd.org Received: from razor.tuxtendo.nl (cp133353-d.venra1.lb.nl.home.com [213.51.187.141]) by hub.freebsd.org (Postfix) with ESMTP id 8441037B416 for ; Thu, 22 Nov 2001 13:51:59 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by razor.tuxtendo.nl (Tuxtendo-ESMTP) with ESMTP id CCFBC27658; Fri, 23 Nov 2001 03:55:51 -0500 (EST) Date: Fri, 23 Nov 2001 03:55:51 -0500 (EST) From: PaZt To: Michael Richards Cc: Subject: Re: Odd sshd messages In-Reply-To: <3BFCF73E.000001.96546@frodo.searchcanada.ca> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Well, please correct me if i'm wrong, but isnt that version a bit buggy ? If so, i would suggest taking a good look at your system and ofcourse upgrade it. cvsup rulez ;) On Thu, 22 Nov 2001, Michael Richards wrote: > I've been getting a number of odd sshd messages. I do not believe my > sshd is vulnerable to any exploits. Here is what I see: > > Nov 21 16:50:16 frodo sshd[2950]: fatal: Local: Corrupted check bytes > on input. > Nov 21 16:50:40 frodo sshd[2962]: fatal: Local: Corrupted check bytes > on input. > Nov 21 16:50:44 frodo sshd[2967]: fatal: Local: Corrupted check bytes > on input. > Nov 21 16:51:02 frodo sshd[2992]: fatal: Local: Corrupted check bytes > on input. > Nov 21 16:51:06 frodo sshd[3001]: fatal: Local: Corrupted check bytes > on input. > > May just be a bogus client, but it may also be someone hammering at > the back door. > > I'm running: > sshd version OpenSSH_2.3.0 > > -Michael > _________________________________________________________________ > http://fastmail.ca/ - Fast Free Web Email for Canadians To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message