Re: Fw: ISS Advisory: OpenSSH Remote Challenge Vulnerability

2002-06-26 Thread Jeremy C. Reed
On Thu, 27 Jun 2002, Jason Lim wrote: > Do you all know how Debian's progress is regarding this? We are starting Debian already released announcement and made new packages available for upgrading OpenSSH for UsePrivilegeSeparation support. I assume that the security.debian.org will have new 3.4 s

Fw: ISS Advisory: OpenSSH Remote Challenge Vulnerability

2002-06-26 Thread Jason Lim
I think this is serious enough for fellow ISP admins that I would post it here. Do you all know how Debian's progress is regarding this? We are starting to get a large increase in SSH probes... perhaps crackers are already compiling a list of hosts running SSH, so when the full vunerability is rel

Re: Fw: ISS Advisory: OpenSSH Remote Challenge Vulnerability

2002-06-26 Thread Jeremy C. Reed
On Thu, 27 Jun 2002, Jason Lim wrote: > Do you all know how Debian's progress is regarding this? We are starting Debian already released announcement and made new packages available for upgrading OpenSSH for UsePrivilegeSeparation support. I assume that the security.debian.org will have new 3.4

Fw: ISS Advisory: OpenSSH Remote Challenge Vulnerability

2002-06-26 Thread Jason Lim
I think this is serious enough for fellow ISP admins that I would post it here. Do you all know how Debian's progress is regarding this? We are starting to get a large increase in SSH probes... perhaps crackers are already compiling a list of hosts running SSH, so when the full vunerability is re