Bugtraq mailing list archives

Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy]

From: iglesias () DRACO ACS UCI EDU (Mike Iglesias)
Date: Tue, 28 Sep 1999 14:24:05 -0700

A trivial demo program that demonstrates the problem is attached.  (It
needs no special privileges; run it as an unprivileged user in any
writable directory.)  The program reports "okay" under Solaris 2.5.1 and
IRIX 6.5.2, "vulnerable" under RedHat 6.


According to your program, Digital Unix 4.0B, 4.0D, and Tru64 Unix 4.0F
are all vulnerable.

Mike Iglesias                        Internet:    iglesias () draco acs uci edu
University of California, Irvine     phone:       949-824-6926
Office of Academic Computing         FAX:         949-824-2069

Current thread:

[Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Marc SPARC (Sep 23)
- Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Tymm Twillman (Sep 26)
  - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Solar Designer (Sep 27)
- Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Dan Astoorian (Sep 27)
  - ufsdump problem under Solaris 2.6 with ufs.c posix (Sep 27)
    - Re: ufsdump problem under Solaris 2.6 with ufs.c Carson Gaspar (Sep 29)
  - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Sean-Paul Rees (Sep 27)
  - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Valdis.Kletnieks () VT EDU (Sep 27)
    - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Alan Cox (Sep 28)
  - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Mike Iglesias (Sep 28)
  - Team Asylum: iHTML Merchant Vulnerabilities Team Asylum (Sep 28)
  - Team Asylum: Yahoo! Messenger DoS Team Asylum (Sep 28)
  - Sun's TTSESSION Vulnerability Bauer, Rich (Sep 29)
    - Re: Sun's TTSESSION Vulnerability Richard L. Goerwitz (Sep 29)
  - WWWBoard Elias Levy (Sep 29)
  - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Sylvain Robitaille (Sep 29)
    - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Dan Astoorian (Sep 29)
    - Re: [Fwd: Truth about ssh 1.2.27 vulnerabiltiy] Sylvain Robitaille (Sep 29)
    - Historical Bugtraq Question Alfred Huger (Sep 30)
    - Microsoft Security Bulletin (MS99-041) Aleph One (Sep 30)

(Thread continues...)