Re: lug-bg: OpenSSH vulnerability

[gf@xxxxxxxxxxx (Georgi Chorbadzhiyski)]

Vasil Kolev wrote:
>    Toku-shto vidqh, che ISS sa publikuvali advisory za OpenSSH problema, v
> kojto se opisva kude e exploita, i ima mnogo lesen nachin da se
> predpazite- trqbva da imate
> ChallengeResponseAuthentication no
> v sshd_config . Samoto advisory mozhe da se nameri na
> http://doom.bastun.net/btr/msg05395.html (zuzhalqvam, ne mozhah da go
> namerq v online arhivete v securityfocus).

QUOTE:
OpenSSH supports the SKEY and BSD_AUTH authentication options. These are
compile-time options. At least one of these options must be enabled
before the OpenSSH binaries are compiled for the vulnerable condition to
be present.

Eeeee tolkova zor, ebasi. Neznam da ima niakoia linux distribucia koiato
da ima SSHD kompilirano s tezi opcii. Kolegite s BSD-ta obache ne im
zavizhdam.


-- 
Georgi Chorbadzhiyski
http://georgi.top.bg/

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================