[GECOS] island report with upcoming issues (fwd)

[Michael Bell]

Bill,

I originally installed regular SSH, but I haven't looked at it in quite
a while.

Mike

-----Original Message-----
From: Bill Murray [mailto:bmurray at snf.stanford.edu] 
Sent: Wednesday, April 30, 2003 10:31 AM
To: computer at snf.stanford.edu
Subject: [GECOS] island report with upcoming issues (fwd)

Mike,

Are we using OpenSSH?

Bill

---------- Forwarded message ----------
Date: Wed, 30 Apr 2003 10:04:17 -0700
From: Joe Little <jlittle at cs.stanford.edu>
To: gecos at island.stanford.edu
Subject: [GECOS] island report with upcoming issues

http://island.stanford.edu/ 
modules.php?op=modload&name=News&file=article&sid=528

Today's article, linked to above, covers an HPUX issue, MySQL issues,  
and most importantly, an issue present in OpenSSH that likely will  
involve updates for all OpenSSH-enabled systems. The attack vector to  
OpenSSH ties into weak passwords, and such an attack would be overly  
noisy. However, I still recommend updating systems when an update is  
available from your vendor. A current workaround is presented as well.

_______________________________________________
GECOS mailing list
GECOS at island.stanford.edu
http://island.stanford.edu/mailman/listinfo/gecos