Package: ssh Version: 1:3.8.1p1-4 Severity: serious Note: I'm not 100% sure I was running ssh -4, and not -3, when I experienced this bug, because the first thing I tried to do to fix it was upgrade. Bug #248125 looks similar, and that was -3? My status-old is dated June second, and has version -4 in it though, so I do think I was running -4.
My colocated server was refusing both ssh and ssl telnet connections. It looked like this: joey:~>ssh -v kite OpenSSH_3.8.1p1 Debian 1:3.8.1p1-4, OpenSSL 0.9.7d 17 Mar 2004 debug1: Reading configuration data /home/joey/.ssh/config debug1: Applying options for kite debug1: Reading configuration data /etc/ssh/ssh_config debug1: Connecting to kite [64.62.161.42] port 22. debug1: Connection established. debug1: identity file /home/joey/.ssh/identity type -1 debug1: identity file /home/joey/.ssh/id_rsa type -1 debug1: identity file /home/joey/.ssh/id_dsa type 2 ssh_exchange_identification: Connection closed by remote host Telnet also hung up before I got to a login prompt. The rest of the serivces seemed ok. I got a root shell via other means, and tried restarting ssh. No luck. Tried upgrading the whole system to current unstable, again, no luck. Then I noticed something strange in ps: 14515 ? S 0:00 sshd: joey [pam] 32215 ? S 0:00 sshd: bdragon [pam] 8978 ? S 0:00 sshd: joeyh [pam] There were a few more that I've elided because they may contain preveligded information. I don't have a "bdragon" or "joeyh" user, and there were some other weird users listed. None of these users were really logged in, that I could tell. I also found this in the log: Jun 2 10:33:06 kitenet sshd[26977]: error: Bind to port 22 on 0.0.0.0 failed: Address already in use. Jun 2 10:33:06 kitenet sshd[26977]: fatal: Cannot bind any address. I killed all of these processes, and restarted ssh again. Now it worked, and so did telnet. I have to catch a plane, so I can't investigate further right now. -- System Information: Debian Release: testing/unstable APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.4.26 Locale: LANG=en_US, LC_CTYPE=en_US Versions of packages ssh depends on: ii adduser 3.56 Add and remove users and groups ii debconf 1.4.25 Debian configuration management sy ii dpkg 1.10.22 Package maintenance system for Deb ii libc6 2.3.2.ds1-13 GNU C Library: Shared libraries an ii libpam-modules 0.76-21 Pluggable Authentication Modules f ii libpam-runtime 0.76-21 Runtime support for the PAM librar ii libpam0g 0.76-21 Pluggable Authentication Modules l ii libssl0.9.7 0.9.7d-3 SSL shared libraries ii libwrap0 7.6.dbs-4 Wietse Venema's TCP wrappers libra ii zlib1g 1:1.2.1.1-3 compression library - runtime -- debconf information excluded -- see shy jo
