From owner-freebsd-security Thu Nov 22 15:24:23 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.interchange.ca (ns.interchange.ca [216.126.79.2]) by hub.freebsd.org (Postfix) with ESMTP id 3438237B405 for ; Thu, 22 Nov 2001 15:24:18 -0800 (PST) Received: by mail.interchange.ca (Fastmailer, from userid 555) id 8358D2747; Thu, 22 Nov 2001 18:24:27 -0500 (EST) MIME-Version: 1.0 Message-Id: <3BFD892B.000003.14411@ns.interchange.ca> Content-Type: Multipart/Mixed; boundary="------------Boundary-00=_RC68ULUXFQQMYJ0CCJD0" To: pazt@razor.tuxtendo.nl Subject: Re: Odd sshd messages Cc: freebsd-security@FreeBSD.ORG From: "Michael Richards" X-Fastmail-IP: 24.43.130.241 Date: Thu, 22 Nov 2001 18:24:27 -0500 (EST) Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --------------Boundary-00=_RC68ULUXFQQMYJ0CCJD0 Content-Type: Text/Plain Content-Transfer-Encoding: 7bit Actually I solved the problem. This was a 4.2-RELEASE machine but it had been upgraded from 3.x machine. Even though sshd 2.3.0 was installed the bootup scripts were running an old 1.x daemon provided by f-secure. So I upgraded everything on that machine so it's 4.4-STABLE now. -Michael > Well, please correct me if i'm wrong, but isnt that version a bit > buggy ? > > If so, i would suggest taking a good look at your system and > ofcourse upgrade it. > > cvsup rulez ;) > > On Thu, 22 Nov 2001, Michael Richards wrote: > >> I've been getting a number of odd sshd messages. I do not believe >> my sshd is vulnerable to any exploits. Here is what I see: >> >> Nov 21 16:50:16 frodo sshd[2950]: fatal: Local: Corrupted check >> bytes on input. >> Nov 21 16:50:40 frodo sshd[2962]: fatal: Local: Corrupted check >> bytes on input. >> Nov 21 16:50:44 frodo sshd[2967]: fatal: Local: Corrupted check >> bytes on input. >> Nov 21 16:51:02 frodo sshd[2992]: fatal: Local: Corrupted check >> bytes on input. >> Nov 21 16:51:06 frodo sshd[3001]: fatal: Local: Corrupted check >> bytes on input. >> >> May just be a bogus client, but it may also be someone hammering >> at the back door. >> >> I'm running: >> sshd version OpenSSH_2.3.0 >> >> -Michael >> _________________________________________________________________ >> http://fastmail.ca/ - Fast Free Web Email for Canadians _________________________________________________________________ http://fastmail.ca/ - Fast Free Web Email for Canadians --------------Boundary-00=_RC68ULUXFQQMYJ0CCJD0-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message