From owner-freebsd-security  Fri Nov 30  5:18:49 2001
Delivered-To: freebsd-security@freebsd.org
Received: from portal.eltex.ru (eltex-gw2.nw.ru [195.19.203.86])
	by hub.freebsd.org (Postfix) with ESMTP id 29F1437B41A
	for <security@freebsd.org>; Fri, 30 Nov 2001 05:18:44 -0800 (PST)
Received: (from root@localhost)
	by portal.eltex.ru (8.11.6/8.11.3) id fAUDIST13786;
	Fri, 30 Nov 2001 16:18:28 +0300 (MSK)
	(envelope-from ark@eltex.ru)
Received: from yaksha.eltex.ru (root@yaksha.eltex.ru [195.19.198.2])
	by portal.eltex.ru (8.11.6/8.11.3av) with SMTP id fAUDIDa12215;
	Fri, 30 Nov 2001 16:18:14 +0300 (MSK)
	(envelope-from ark@eltex.ru)
From: ark@eltex.ru
Received: by yaksha.eltex.ru (ssmtp TIS-0.6alpha, 19 Jan 2000); Fri, 30 Nov 2001 16:07:31 +0300
Received: from undisclosed-intranet-sender id smtpdk28905; Fri Nov 30 16:07:14 2001
Date: Fri, 30 Nov 2001 16:10:45 +0300
Message-Id: <200111301310.QAA13314@paranoid.eltex.ru>
In-Reply-To: <4.3.2.7.2.20011129214449.052ded50@localhost> from "Brett Glass <brett@lariat.org>"
Organization: "Klingon Imperial Intelligence Service"
Subject: Re: Lack of evidence for new SSH vulnerability
To: brett@lariat.org
Cc: security@FreeBSD.ORG
X-Virus-Scanned: by Eltex TC
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

-----BEGIN PGP SIGNED MESSAGE-----

nuqneH,

Speaking on risks associated with sshd these days, my current opinion is 
considering sshd as one of probable weak points.

I recommend everyone not to accept ssh connections from untrusted/unknown
hosts at least.
                                     _     _  _  _  _      _  _
 {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
 (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
 [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.1i

iQCVAwUBPAeFUqH/mIJW9LeBAQEMhQP9HB1uVR6b2QwOe+OCRwa++E5ANqRCp9RH
4/puMK360SRZoVgN+OdvWs7O0Z/zh8CVFXOmVSbsmkKFVa0YczwaXMwy8zzB2XEr
B/O9f8CsT/lGCK5uPYFGDrW0G9F53pksVRXyaFZoyIHCnNS+pOrP5b1PGpI4+/dZ
qNHPVQhgQu4=
=p8B6
-----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message