[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Savannah-hackers] Re: URGENT: ssh exploit
From: |
Paul Fisher |
Subject: |
[Savannah-hackers] Re: URGENT: ssh exploit |
Date: |
Wed, 26 Jun 2002 13:37:56 -0400 |
User-agent: |
Mutt/1.3.25i |
On Wed, Jun 26, 2002 at 12:55:16PM -0400, Paul Fisher wrote:
> The root exploit information for openssh was released today.
> savannah is wide open to attack.
This is incorrect, as the version of ssh on savannah is too old for
the attack to work.
I would still like to see ssh on savannah upgraded though, as the
privilege seperation code would be a good addition -- a worst case of
gaining access to a chroot'd jail is much than gaining root privs.