From owner-freebsd-security Thu Aug 1 3:56: 1 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8F55637B400 for ; Thu, 1 Aug 2002 03:55:58 -0700 (PDT) Received: from yoda.bph.ruhr-uni-bochum.de (yoda.bph.ruhr-uni-bochum.de [134.147.196.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2DE7C43E65 for ; Thu, 1 Aug 2002 03:55:57 -0700 (PDT) (envelope-from cwe@bph.ruhr-uni-bochum.de) Received: from gonzo (gonzo [134.147.196.22]) by yoda.bph.ruhr-uni-bochum.de (8.8.8/8.8.8) with SMTP id MAA31880; Thu, 1 Aug 2002 12:55:47 +0200 From: Christoph Wegener To: Shunichi Konno , Mario Pranjic Cc: freebsd-security@FreeBSD.ORG Date: Thu, 01 Aug 2002 12:55:46 +0200 X-Priority: 3 (Normal) Organization: Lehrstuhl fuer Biophysik - Ruhr-Universitaet Bochum In-Reply-To: Message-Id: Subject: Re: openssh-3.4p1.tar.gz trojaned MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" X-Mailer: Opera 6.04 build 1135 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi, but be careful: you have to check it with the original tgz-file, cause the shellscript removes its existence itself from the archive once you have installed. So taking your tree and making a tgz is NO solution to test... Greetz Christoph 1.8.2002 12:15:22, Mario Pranjic wrote: >On Thu, 1 Aug 2002, Shunichi Konno wrote: > >> Date: Thu, 01 Aug 2002 19:11:53 +0900 >> From: Shunichi Konno >> To: freebsd-security@FreeBSD.ORG >> Subject: Re: openssh-3.4p1.tar.gz trojaned >> >> I have same openssh-3.4.tgz which md5 checksum is >> 39659226ff5b0d16d0290b21f67c46f2, and there is no files >> such like trojaned openssh-3.4p1.tgz have. > >So I checked it too. :) No bf-test.c in source. -- .-. Ruhr-Universitaet Bochum /v\ L I N U X Lehrstuhl fuer Biophysik // \\ >Penguin Computing< c/o Christoph Wegener /( )\ Gebaeude ND 04/Nord ^^-^^ D-44780 Bochum, GERMANY Tel: +49 (234) 32-25754 Fax: +49 (234) 32-14626 mailto:cwe@bph.ruhr-uni-bochum.de http://www.bph.ruhr-uni-bochum.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message