Re: iDEFENSE: Upcoming OpenSSH Security Advisory Announcement

[Rodrigo Barbosa <rodrigob () suespammers org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, May 03, 2004 at 11:51:12AM -0400, Richard Johnson wrote:
> iDEFENSE Security Advisory 05.03.04:
> http://www.idefense.com/advisory/05.03.04.txt

> However, everyone should update to OpenSSH 3.8 immediately, and enable
> priv seperation in their ssh daemons, by setting this in your
> /etc/ssh/sshd_config file:
>
>       UsePrivilegeSeparation yes

Isn't this the exploitability condition from one of the pervious OpenSSH
bugs ?

- -- 
Rodrigo Barbosa <rodrigob () suespammers org>
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAlqMjpdyWzQ5b5ckRAnCzAJ9muaZ/UXZTJELcf3c5GWQvM1ZpYQCfY+dM
GSF61I+TPVAOEeclWET69EU=
=S13D
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html