Re: [cobalt-users] Clarification on SSH access

[Fraser Campbell <fraser@xxxxxxxxxxx>]

Regarding, OpenSSH Server Release 2.1.1p2 ...

Peter Low <peterlow@xxxxxxxxxxxxxxxxxx> writes:

> First, I don't think you needed to install the client release.
> 
> Second, you don't mention starting up sshd.  Make sure you have done so.
> 
> Third,  PuTTY is trying to access telnet, not SSH.  In the session screen, 
> make sure you have SSH selected as your protocol.  It should connect to 
> port 22.
> 
> Fourth, I'd recommend logging in as a user, then using "su" to change to root.

Fifth, don't install that package at all.  OpenSSH versions prior to 2.3.0
have known, and widely publicised, security issues.  There is even a 2.5.1
version now ... if you're installing SSH go with 2.5.1.

http://www.openssh.com/security.html:

    A buffer overflow in the CRC32 compensation attack detector can lead to
    remote root access. This problem has been fixed in OpenSSH
    2.3.0. However, versions prior to 2.3.0 are vulnerable." 

-- 
fraser campbell <fraser@xxxxxxxxxxx>                          starnix inc.
tollfree: (905) 771-0017                        thornhill, ontario, canada
http://www.starnix.com/             professional linux services & products