Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Nov 2001 18:24:27 -0500 (EST)
From:      "Michael Richards" <michael@fastmail.ca>
To:        pazt@razor.tuxtendo.nl
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Odd sshd messages
Message-ID:  <3BFD892B.000003.14411@ns.interchange.ca>

next in thread | raw e-mail | index | archive | help

--------------Boundary-00=_RC68ULUXFQQMYJ0CCJD0
Content-Type: Text/Plain
Content-Transfer-Encoding: 7bit

Actually I solved the problem.
This was a 4.2-RELEASE machine but it had been upgraded from 3.x 
machine. Even though sshd 2.3.0 was installed the bootup scripts were 
running an old 1.x daemon provided by f-secure. So I upgraded 
everything on that machine so it's 4.4-STABLE now.

-Michael

> Well, please correct me if i'm wrong, but isnt that version a bit
> buggy ?
>
> If so, i would suggest taking a good look at your system and
> ofcourse upgrade it.
>
> cvsup rulez ;)
>
> On Thu, 22 Nov 2001, Michael Richards wrote:
>
>> I've been getting a number of odd sshd messages. I do not believe
>> my sshd is vulnerable to any exploits. Here is what I see:
>>
>> Nov 21 16:50:16 frodo sshd[2950]: fatal: Local: Corrupted check
>> bytes on input.
>> Nov 21 16:50:40 frodo sshd[2962]: fatal: Local: Corrupted check
>> bytes on input.
>> Nov 21 16:50:44 frodo sshd[2967]: fatal: Local: Corrupted check
>> bytes on input.
>> Nov 21 16:51:02 frodo sshd[2992]: fatal: Local: Corrupted check
>> bytes on input.
>> Nov 21 16:51:06 frodo sshd[3001]: fatal: Local: Corrupted check
>> bytes on input.
>>
>> May just be a bogus client, but it may also be someone hammering
>> at the back door.
>>
>> I'm running:
>> sshd version OpenSSH_2.3.0
>>
>> -Michael
>> _________________________________________________________________
>> http://fastmail.ca/ - Fast Free Web Email for Canadians

_________________________________________________________________
     http://fastmail.ca/ - Fast Free Web Email for Canadians
--------------Boundary-00=_RC68ULUXFQQMYJ0CCJD0--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BFD892B.000003.14411>