|
|
Re: lug-bg: [Fwd: [Full-Disclosure] **NEW** OpenSSH Vuln Today]
- Subject: Re: lug-bg: [Fwd: [Full-Disclosure] **NEW** OpenSSH Vuln Today]
- From: George Danchev <danchev@xxxxxxxxx>
- Date: Wed, 24 Sep 2003 13:31:31 +0300
On Wednesday 24 September 2003 12:19, Georgi Chorbadzhiyski wrote:
> Teodor Georgiev wrote:
> > Interesno e obache kak horata meriat vsichko s dvoen arshin...
> > Ako exploita beshe za sendmail, dosega da se beshe napylnil threada s
> > flame war za tova, kolko bygav e sendmail i che oshte imalo mnogo serveri
> > raboteshti pod sendmail. I kolko stabilen bil qmail i t.n. i t.n.
> >
> > Ama kato izleze exploit v openssh ili apache i vseki sedi i se pochesva
> > po topkite?
> > Chudno mi e shto ne pluete po ssh?
>
> Zashtoto niama "track record" kato sendmail. Da ne govorim che poslednite
> bugove, dosega nikoi ne e dokazal che sa remote exploitable, samo che
> mogat da prichiniat DoS.
takiva security umozaklu4eniq vinagi sa osvezhavasti ;-)
slu4ajno da ti e izvestno 4e sendmail e mnogo po otdavna v biznesa (maj ne se
sestam po staro prilozhenie s podobno razprostranenie) otkolkoto openssh...
mnogo po-golqm e kato code base i e syvsem v reda na nestata da ima pove4e
(kato obsta brojka) otkriti bugs ot openssh. Osven tova openssh e razdelen na
2 branches - strict openbsd i portable kojto ot svoq strana mogat da imat
nepripokrivasti ili specifi4ni se bug records. Tq rabotata e dosta po-slozhna
ot pravolinejno brojkane na total (sec) bugs... krivo merish...
Ne e trudno da se seti 4ovek 4e tezi koito iztykvat 4e ne polzvat sendmail
predimno se opravdavat s security pri4ini, a dejstvitelno rqdko priznavat 4e
prosto ne im e po silite da go administrirat. V krajna smetka seki polzva
kakvoto mozhe i kakvoto mu e po silite.
--
pub 4096R/0E4BD0AB 2003-03-18 <keyserver.bu.edu>
1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================
|
|
|