[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Upcoming OpenSSH vulnerability



On Tue, Jun 25, 2002 at 03:12:27AM -0600, Theo de Raadt wrote:
> Maybe yes, maybe no.
> 
> Note I've not answered your question either way.  So what are you going to
> do?  Perhaps follow the instructions I sent?

I did upgrade to 3.3 before sending this question and just to be sure
I firewalled (ie port 22 open only for a restricted set of IPs) most
of the boxes.
However, I asked that question since :
1) PermitRootLogin is on by default on 3.3
2) "root logins are special" :)

Anyway, I perfectly understand why you don't want to answer this type
of questions right now.

-- 
Rémi