> I got lots of scans on port 22 recently, is there any known ssh security 
> holes being discussed recently? Thanks. 


Yes, there are some security-holes in some not up-to-date (but used!)
SSH-Versions:

http://razor.bindview.com/publish/advisories/adv_ssh1crc.html
http://www.kb.cert.org/vuls/id/945216


An analysis of this topic was posted on November 9 by David A. Dittrich on the
"Incidents" List:
http://www.der-keiler.de/Mailing-Lists/securityfocus/incidents/2001-11/0042.html

If you follow the thread, you will get a picture of what's going on at the
moment.

Ulrich Keil
Searching for an archive of the most important Security Mailing-Lists?
http://www.der-keiler.de

Reply via email to