[plug] OpenSSH

Matt Kemner zombie at networx.net.au
Thu Dec 9 09:26:18 WST 1999


On Wed, 8 Dec 1999, Leon Brooks wrote:

> > with RSAREF enabled...
> 
> Just bugs, or *ghasp* security holes?

Security holes.

"For SSH up to 1.2.27 compiled with RSAREF2 this implies the remote
execution of arbitrary commands as root."

http://www.securityfocus.com/templates/archive.pike?list=1&msg=3845D352.95E47E26@core-sdi.com

 - Matt



More information about the plug mailing list