Security Incidents mailing list archives

SSH2 Exploit?


From: jonz () NETRAIL NET (Jonathan A. Zdziarski)
Date: Wed, 9 Feb 2000 21:30:17 -0500


We recently had one of our remote logging servers compromised.  It was
totally locked down running only ssh2; all inet processes were turned off.
Unfortunately, they obliterated the disk so we were not able to get any
information about how they exploited our machine, however since the only
point of entry was SSH2, I'm very concerned about a possibly vulnerability
in the code.  What is the general consensus of the 'most secure' version of
ssh? 1.2.27?

Thank you,

Jonathan A. Zdziarski
Director - MIS
NetRail, inc.
230 Peachtree St.
Suite 1700
Atlanta, GA 30303
404-522-5400 x240


Current thread: