On Tue, 28 Sep 1999, Gregor Mosheh wrote:
> I had the same problem myself - upping to 2.0.13 corrected this. The
> problem I had, more specifically, was that a sshd wouldn't die, even if a
> connection was never successfully established.
>
> With 2.0.12, this also happened because of something in a remote user's
> .ssh2 directory. That is, when he came from server B to server A, the
> session on server A would hang when he exits. And he solved this by
> delketing his .ssh2 directory, so we never did track it down.
I've done some testing, upping to .13 fixed the problem but it is still
possible to cause a daemon spawn by using a .12 or possibly < client.
This opens up for DoS.
rgds
/PL
