RE: [cobalt-users] SSH EXPLOIT IN THE WILD

["H.P. Noordam" <bno@xxxxxxxxxxxx>]

> -----Oorspronkelijk bericht-----
> Van: Cobalt Supply [mailto:cobalt@xxxxxxxxxxxxxxxxx] 
> Verzonden: dinsdag 16 september 2003 19:06
> Aan: cobalt-users@xxxxxxxxxxxxxxx
> Onderwerp: [cobalt-users] SSH EXPLOIT IN THE WILD
> 
> 
> There's a new exploit for SSH in wild. Read more about it at 
> http://slashdot.org/articles/03/09/16/1327248.shtml?tid=126&tid=172
> 
> Affects the latest version of SSH in Debian, BSD and RedHat.
> 
> -----


The freebsd team has released a security warning indicating that the bug
is able to crash the ssh server, but is believed to be unable to execute
code. Does anyone know how the redhat/cobalt version will behave ? 
Crash only, or run code ... 

Bob.



III. Impact

A remote attacker can cause OpenSSH to crash.  The bug is not believed
to be exploitable for code execution on FreeBSD.