Bugtraq mailing list archives

sshd gives out version number


From: tdyas () REMUS RUTGERS EDU (Tom Dyas)
Date: Thu, 9 Jul 1998 18:19:42 -0400


This is not a vulnerability per se but the ssh daemon in its initial
header when a client connects gives out its version number besides the
protocol version number. Obviously, the protocol version number is needed
but the daemon version number would seem to give away information about
potential vulnerabilties in the ssh daemon which someone could then try
and exploit. A coworker pointed out this behavior to me.

Tom



Current thread: