Re: lug-bg: OpenSSH vulnerability

[borj@xxxxxxxxx (Boris Jordanov)]

On Wed, 26 Jun 2002 19:19:46 +0300
Georgi Chorbadzhiyski <gf@xxxxxxxxxxx> wrote:

> QUOTE:
> OpenSSH supports the SKEY and BSD_AUTH authentication options. These are
> compile-time options. At least one of these options must be enabled
> before the OpenSSH binaries are compiled for the vulnerable condition to
> be present.
> 
> 
> Eeeee tolkova zor, ebasi. Neznam da ima niakoia linux distribucia koiato
> da ima SSHD kompilirano s tezi opcii. Kolegite s BSD-ta obache ne im
> zavizhdam.
> 

Mdam, tazi opcia kasae tochno S/KEY auth. Ne znam dali e compiled v RH7.2
openssh, obache e enabled by default:

# Uncomment to disable s/key passwords
#ChallengeResponseAuthentication no

P.S. ISS veche me draznjat s priprjanostta si.

Take care

Boris Jordanov (borj) <borj@xxxxxxxxx>
ICQ 10751645

PGP-key-fingerprint:------------------------------
CB23 8B52 5FBC F36A 1B61  F1ED 2831 E52D AAFF 7B08
--------------------------------------------------
Public-key:---------------------------------------
http://borj.freeshell.org/borj.asc
--------------------------------------------------
To err is human...
to really foul up requires the root password.

<HR>
<UL>
<LI>application/pgp-signature \\\\\\\\\ \\\\: stored
</UL>

============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================