On Wed, 2004-01-14 at 11:49, Greg Bolshaw wrote: > On Tue, 2004-01-13 at 20:11, gabriel wrote: > > i'm working on a linux box here @work that's running a little-known distro > > called "neos" and i'm trying to determine if the ssh daemon that's running on > > it is free of all the scary bugs that have appeared over the last year. > > Probably best to install Nessus (http://www.nessus.org/) or similar and > scan for vulns in the SSH daemon.
Nessus only checks the version string to check if a daemon is vulnerable. Some distro's have backported fixes, so they appear to run a vulnerable verion when they are not. -- ______________________________________________________________________ Guy Van Sanden http://unixmafia.port5.com Registered Linux user #249404 - September 1997 ______________________________________________________________________ -- [EMAIL PROTECTED] mailing list
