From owner-freebsd-security@FreeBSD.ORG Wed Sep 24 07:38:40 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 023B216A4B3 for ; Wed, 24 Sep 2003 07:38:40 -0700 (PDT) Received: from tenebras.com (laptop.tenebras.com [66.92.188.18]) by mx1.FreeBSD.org (Postfix) with SMTP id 60D8B43FA3 for ; Wed, 24 Sep 2003 07:38:33 -0700 (PDT) (envelope-from kudzu@tenebras.com) Received: (qmail 96815 invoked from network); 24 Sep 2003 14:38:32 -0000 Received: from sapphire.tenebras.com (HELO tenebras.com) (192.168.188.241) by laptop.tenebras.com with SMTP; 24 Sep 2003 14:38:32 -0000 Message-ID: <3F71AC68.2020607@tenebras.com> Date: Wed, 24 Sep 2003 07:38:32 -0700 From: Michael Sierchio User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, zh-tw, zh-cn, fr, en, de-de MIME-Version: 1.0 To: security@freebsd.org References: <3F705D4D.4070404@tenebras.com> <20030923205318.GB3346@scylla.towardex.com> <20030924091603.GC22622@starjuice.net> <20030924142015.GC57288@madman.celabo.org> In-Reply-To: <20030924142015.GC57288@madman.celabo.org> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: OpenSSH: multiple vulnerabilities in the new PAM code X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Sep 2003 14:38:40 -0000 Jacques A. Vidrine wrote: > Unfortunately, it _does_ affect us. The PAM code in OpenSSH 3.7x was > taken from FreeBSD's PAM code. des@ is working the issue now. Jacques, Dag-Erling - The effort is much appreciated. There are a couple of PAMs I'm working on at the moment, and would love to be able to trust the AAA chain. Regards, MS