RE: [cobalt-users] SSH EXPLOIT IN THE WILD

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

HN> Date: Tue, 16 Sep 2003 21:35:14 +0200
HN> From: H.P. Noordam


HN> The freebsd team has released a security warning indicating
HN> that the bug is able to crash the ssh server, but is believed
HN> to be unable to execute code. Does anyone know how the
HN> redhat/cobalt version will behave ?  Crash only, or run code
HN> ...

AFAIK:

It's believed Linux is vulnerable to code execution.  Linux and
FreeBSD have different memory heap implementations, and some
internal management data structures are in harm's way with Linux.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 785 865 5885 Lawrence and [inter]national
Phone: +1 316 794 8922 Wichita
_________________________________________________________________
          DO NOT send mail to the following addresses :
  blacklist@xxxxxxxxx -or- alfra@xxxxxxxx -or- curbjmp@xxxxxxxx
Sending mail to spambait addresses is a great way to get blocked.