From owner-freebsd-security@FreeBSD.ORG  Wed Jul  8 13:58:32 2009
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id C3EC9106564A;
	Wed,  8 Jul 2009 13:58:32 +0000 (UTC)
	(envelope-from nhoughton@sourcefire.com)
Received: from mail-yx0-f181.google.com (mail-yx0-f181.google.com
	[209.85.210.181])
	by mx1.freebsd.org (Postfix) with ESMTP id 51AA88FC16;
	Wed,  8 Jul 2009 13:58:32 +0000 (UTC)
	(envelope-from nhoughton@sourcefire.com)
Received: by yxe11 with SMTP id 11so8138892yxe.3
	for <multiple recipients>; Wed, 08 Jul 2009 06:58:31 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.100.47.10 with SMTP id u10mr12488745anu.17.1247060190984; Wed, 
	08 Jul 2009 06:36:30 -0700 (PDT)
In-Reply-To: <a2b6592c0907071815n761e0bf2rc8d04fca0fa25ac6@mail.gmail.com>
References: <4A53EDC1.4040506@freebsd.org>
	<a2b6592c0907071815n761e0bf2rc8d04fca0fa25ac6@mail.gmail.com>
Date: Wed, 8 Jul 2009 09:36:30 -0400
Message-ID: <3a88cd320907080636g1e30610ek4de2384abab6f779@mail.gmail.com>
From: Nigel Houghton <nhoughton@sourcefire.com>
To: Igor Mozolevsky <mozolevsky@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Mailman-Approved-At: Wed, 08 Jul 2009 14:15:19 +0000
Cc: freebsd security <freebsd-security@freebsd.org>,
	security-officer@freebsd.org, secteam@freebsd.org
Subject: Re: rumours of openssh vulnerability
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Jul 2009 13:58:33 -0000

On Tue, Jul 7, 2009 at 9:15 PM, Igor Mozolevsky<mozolevsky@gmail.com> wrote:
> 2009/7/8 FreeBSD Security Officer <cperciva@freebsd.org>:
>
>> There are rumours flying around about a supposed vulnerability in OpenSSH.
>
> [snip]
>
> More information is at the Internet Storm Center:
> http://isc.sans.org/diary.html?storyid=6742
>
>
> Cheers,
> --
> Igor


Actually, no, there isn't any more information on the ISC blog. There
is actually less information, the logs are truncated (not that there's
anything to see in them anyway).

Nice to see an appropriate reaction to this "issue" from Colin.

-- 
Nigel Houghton
Head Mentalist
SF VRT
http://vrt-sourcefire.blogspot.com && http://www.snort.org/vrt/