Re: OpenBSD rootkit?

[Rukh <rukh@rukh.net>]

On Sun, 14 Jul 2002, Przemyslaw Frasunek wrote:

> > there's no promises. just a humble mention of "1 remote hole in 6
> > years". pretty damn good.
>
> This claim is wrong, OpenSSH was vulnerable to CRC32 integer overflow
> two years ago.
>

So you know of another remote exploit in the default install in the last 6
years then? If not, then the count remains at 1 and the claim stands. 1
remote hold in 6 years.

On the other hand, thanks for your original posting regarding the rooted
sshd and how to spot it etc.

-- Rukh