On Wed, 17 Sep 2003, Avleen Vig wrote:
>
> On Tue, Sep 16, 2003 at 03:50:04PM -0400, [EMAIL PROTECTED] wrote:
> > A posting to full-disclosure quotes Theo as saying HP and Cisco are affected,
> > and I don't see any reason that Juniper would *NOT* be, given the common code
> > base of the OpenSSH
> -Original Message-
> From: Avleen Vig [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, September 17, 2003 10:27 AM
> To: [EMAIL PROTECTED]
> Cc: Richard A Steenbergen; William Allen Simpson; [EMAIL PROTECTED]
> Subject: Re: new openssh issue
>
>
>
> On Tue, Sep 16, 2003
If remotely exploitable as the discoverer says, this could potentially have
more operational impact :-(
http://www.sendmail.org/8.12.10.html
---Mike
On Tue, Sep 16, 2003 at 03:50:04PM -0400, [EMAIL PROTECTED] wrote:
> A posting to full-disclosure quotes Theo as saying HP and Cisco are affected,
> and I don't see any reason that Juniper would *NOT* be, given the common code
> base of the OpenSSH implementations. I'm not going to say the router
.net
===
-Original Message-
From: Ingevaldson, Dan (ISS Atlanta)
Sent: Tuesday, September 16, 2003 4:01 PM
To: [EMAIL PROTECTED]; Richard A Steenbergen
Cc: William Allen Simpson; [EMAIL PROTECTED]
Subject: RE: new openssh issue
ISS X-Force discovered this vulnerability and our advi
Richard A Steenbergen
Cc: William Allen Simpson; [EMAIL PROTECTED]
Subject: Re: new openssh issue
On Tue, 16 Sep 2003 15:33:03 EDT, Richard A Steenbergen said:
> > patched, but does anybody know whether there's a problem with the
> > criscos? (as in "how do I configure m
On Tue, 16 Sep 2003 15:33:03 EDT, Richard A Steenbergen said:
> > patched, but does anybody know whether there's a problem with the
> > criscos? (as in "how do I configure my router for that?" ;-)
>
> Or better yet, the OpenSSH running on Junipers? Nothing on Juniper's site
> about a vulnerabi
On Tue, Sep 16, 2003 at 03:08:38PM -0400, William Allen Simpson wrote:
>
> Len Rose wrote:
> >
> > Just in case no one has seen this:
> >
> > http://slashdot.org/articles/03/09/16/1327248.shtml?tid=126&tid=172
>
> I had not, and I thank you! My debian and NetBSD systems were quickly
> patche
Len Rose wrote:
>
> Just in case no one has seen this:
>
> http://slashdot.org/articles/03/09/16/1327248.shtml?tid=126&tid=172
I had not, and I thank you! My debian and NetBSD systems were quickly
patched, but does anybody know whether there's a problem with the
criscos? (as in "how do I co
