Re: [cobalt-users] OpenSSH install -- one final question.

["Lennie Core" <lcore@xxxxxxxx>]

But dosen't this .pkg file have the problems of security as spoken 
of at http://openssh.com   ?

OpenSSH 2.3.1, a development snapshot which was never released,  was vulnerable to "Feb 8, 2001: Authentication By-Pass Vulnerability in  OpenSSH-2.3.1", {HYPERLINK "http://www.openbsd.org/advisories/ssh_bypass.txt"}OpenBSD Security Advisory. In protocol 2,  authentication could be bypassed if public key authentication was  permitted. This problem does exist only in OpenSSH 2.3.1, a three  week internal development release. OpenSSH 2.3.0 and versions newer  than 2.3.1 are not vulnerable to this problem. 
Looks like Sun/Cobalt would keep their Site security Updated better..

Lennie Core


> 
> I had no problem with installing the packages, and it seems to work great!
> 
> One question, though -- I DO still need to run "ln -s /etc/rc.d/init.d/sshd 
> /etc/rc.d/rc3.d/S85sshd" to ensure it runs again on reboot, right? Or is 
> this taken care of by the package, and I've just somehow missed it?
> 
> (I'm miles away from the box, so I don't really wanna lose contact with it...)
> 
> Any suggestions?
> 
> 
> 
> At 02:01 PM 2/28/2001 +1100, you wrote:
> On Tue, 27 Feb 2001, Andrew wrote:
> 
>  > Hi
>  >
>  > Thanks for this but www.pkg.nl.coblat.com have CORUPT pkg's for secure 
> telnet has anyone got any that work ??
>  >
>  > (I know they are corrupt as a few friend have also tried them )
> 
> They work perfect on My RaQ3 They installed and started direct from the
> GUI.
> 
> I copied the shortcut and ran install from web address!
> 
> Tired TechSupport
> 
> 
>  >
>  > Andrew
>  >
>  > > > I found the pkg's for secure telnet for Raq3 but they are corrupt - 
> I am told the old ones wear OK - has anyone here
>  > > got a set of
>  > > > openSSH pkg's which work ?? or know where to go
>  > > >
>  > > > RaQ3-RaQ4-OpenSSH-Server-2.1.1p2 (510 Kb)
>  > > > RaQ3-RaQ4-OpenSSH-Client-2.1.1p2 (483 Kb)
>  > > >
>  > > > Thanks
>  > > >
>  > > > AJB
>  >
>  >
>  > _______________________________________________
>  > cobalt-users mailing list
>  > cobalt-users@xxxxxxxxxxxxxxx
>  > To Subscribe or Unsubscribe, please go to:
>  > http://list.cobalt.com/mailman/listinfo/cobalt-users
>  >
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 
> 
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
> 


---------------------------------------------------
             Lennie Core, Ceo
       Coreave.com, Design & Hosting
               757-442-6240
            http://coreave.com