Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 1 Nov 1998 20:54:04 -0800
From:      "Jan B. Koum " <jkb@best.com>
To:        Paul Hart <hart@iserver.com>
Cc:        Peter Jeremy <peter.jeremy@auss2.alcatel.com.au>, freebsd-security@FreeBSD.ORG, winter@jurai.net
Subject:   Re: SSH vsprintf patch. (You've been warned Mr. Glass)
Message-ID:  <19981101205404.A6579@best.com>
In-Reply-To: <Pine.BSF.3.96.981101212627.20271B-100000@anchovy.orem.iserver.com>; from Paul Hart on Sun, Nov 01, 1998 at 09:29:32PM -0700
References:  <19981101192724.A26335@best.com> <Pine.BSF.3.96.981101212627.20271B-100000@anchovy.orem.iserver.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Nov 01, 1998 at 09:29:32PM -0700, Paul Hart <hart@iserver.com> wrote:
> On Sun, 1 Nov 1998, Jan B. Koum  wrote:
> 
> > Which is why when you install ssh, you can run ./configure with
> > "--disable-suid-ssh" argument. 
> 
> Which is a good thing, except for this time where the alleged hole appears
> to be in sshd, a problem a non-SUID ssh won't help. 
> 
> Paul Hart
> 
> --
> Paul Robert Hart        ><8>  ><8>  ><8>        Verio Web Hosting, Inc.
> hart@iserver.com        ><8>  ><8>  ><8>        http://www.iserver.com/
> 

	Uhm.. I know that. I was replying to the message which talked
	about possible buffer overflow problems with ssh client. :)

-- Yan

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19981101205404.A6579>