[H-GEN] Openssh trojan

[Robert Brockway]

[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

On Fri, 2 Aug 2002, Robert Brockway wrote:

> [ Humbug *General* list - semi-serious discussions about Humbug and     ]
> [ Unix-related topics. Posts from non-subscribed addresses will vanish. ]
> 
> Hi all.  OpenSSH versions 3.2.2p1, 3.4p1 and 3.4 have a trojan.  This is a

Sorry, should have said "may" have a trojan.  The bad code was reportedly 
inserted on July 30 or 31 and spotted on Aug 1.  Only compiles occuring in 
that time should be exploitable.

Rob

-- Robert Brockway B.Sc. email: robert at timetraveller.org  ICQ: 104781119
   Linux counter project ID #16440 (http://counter.li.org)
   "The earth is but one country and mankind its citizens" -Baha'u'llah


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/