Bugtraq mailing list archives
Bug in ssh client (open ssh 2.3.0)
From: Tomasz Kuźniar <mezon () PROFNET PL>
Date: Fri, 9 Feb 2001 09:59:34 +0100
hi, When Michal Zalewski found bug in ssh, most people tried to reinstall their ssh. They usualy install openssh 2.3.0 or higher, or ssh2.com Well, it could not be the best fix using openssh client 2.3.0p1 (i dont check other ver.). I've compile it from sources, so look at it: mezon@ania:~$whereis ssh ssh: /usr/local/bin/ssh mezon@ania:~$ls -al /usr/local/bin/ssh -rws--x--x 1 root root 663364 Feb 8 14:48 /usr/local/bin/ssh* mezon@ania:~$ssh mezon@ania mezon@ania's password: Segmentation fault mezon@ania:~$ When it crash? heh, there must be some conditions: 1. on my host : mist be typed "ssh -l mezon ania" or ssh mezon@ania (When using full ip or address it will not segv) 2. when password prompted, You will have to type some chars, then press <BACKSPACE> button , and next <ENTER> Ssh client is suid, so it could be real problem. Must check source... Mezon -- Tomasz Kuzniar <mezon () profnet pl> * Polska Platforma Internetowa * ~ ~ ~ "Wioska zabita dechami - Village killed by desks"
Current thread:
- Re: Bug in ssh client (open ssh 2.3.0) Ben Greenbaum (Feb 10)
- <Possible follow-ups>
- Bug in ssh client (open ssh 2.3.0) Tomasz Kuźniar (Feb 10)
- Re: Bug in ssh client (open ssh 2.3.0) rafal wiosna (Feb 10)
- Re: Bug in ssh client (open ssh 2.3.0) Tatu Ylonen (Feb 10)
- Re: Bug in ssh client (open ssh 2.3.0) rafal wiosna (Feb 10)
- Re: Bug in ssh client (open ssh 2.3.0) Tatu Ylonen (Feb 12)