[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ISS: OpenSSH Remote Challenge Vulnerability



On Wed, Jun 26, 2002 at 10:12:13AM -0600, Theo de Raadt wrote:
> Saying "disable ChallengeResponse" would have focused attention
> immediately on about 500 lines of code.

is it just me or did iss release the info one week early?  based on
your previous messages i thought the info was going to be released on
wednesday and 3.4 would be released on monday/tuesday.

kevin

-- 
kevin@suberic.net     that a believer is happier than a skeptic is no more to
fork()'ed on 37058400   the point than the fact that a drunken man is happier
meatspace place: inle      than a sober one. the happiness of credulity is a
http://suberic.net/~kevin    cheap & dangerous quality -- g.b. shaw