Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 01 Aug 2002 11:20:21 +0200
From:      Christoph Wegener <cwe@bph.ruhr-uni-bochum.de>
To:        freebsd-security@freebsd.org
Subject:   Re: openssh trojan (alert)
Message-ID:  <OJFDNHHCTSZT6GJDUOA0PJMLRQOLEA.3d48fd55@gonzo>

next in thread | raw e-mail | index | archive | help

Hi everybody,
I just checked it double: YES the openssh-3.4p1.tar.gz on ftp.openbsd.org is TROJANED!!! I downloaded our versions here just after there 
were released from the OpenSSH team, these ones seem to be clean. BUT: The version which is actually available on ftp.openbsd.org is 
NOT clean! Or did I make a mistake in my analysis?!?

So is this the time to say good bye to OpenSSH?!? ;))

Christoph
--
    .-.                             Ruhr-Universitaet Bochum
    /v\    L   I   N   U   X        Lehrstuhl fuer Biophysik
   // \\  >Penguin Computing<       c/o Christoph Wegener
  /(   )\                           Gebaeude ND 04/Nord
   ^^-^^                            D-44780 Bochum, GERMANY

Tel: +49 (234) 32-25754             Fax: +49 (234) 32-14626
mailto:cwe@bph.ruhr-uni-bochum.de   http://www.bph.ruhr-uni-bochum.de




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OJFDNHHCTSZT6GJDUOA0PJMLRQOLEA.3d48fd55>