• Skip to main content
  • Skip to primary sidebar

BSDFreaks.nl

For starters and advanced *BSD users

Tags

brand dmi enschede FreeBSD harddisk Hardware Howto's Howto's move new ports server serverruimte universiteit utwente

OpenSSH security bug in FreeBSD

March 7, 2002 by Rob

In Openssh is een security bug gevonden, dus update je SSH versie.
Volg de link en volg de instructies.
[quote]
II Problem Description

OpenSSH multiplexes `channels’ over a single TCP connection in order
to implement X11, TCP, and agent forwarding. An off-by-one error in
the code which manages channels can result in a reference to memory
beyond that allocated for channels. A malicious client or server may
be able to influence the contents of the memory so referenced.

III. Impact

An authorized remote user (i.e. a user that can successfully
authenticate on the target system) may be able to cause sshd to
execute arbitrary code with superuser privileges.

A malicious server may be able to cause a connecting ssh client to
execute arbitrary code with the privileges of the client user.
[/quote]

[url=ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-02%3A13.openssh.asc]Link[/url]

Filed Under: *BSD news from the past

Reader Interactions

Comments

  1. Anonymous says

    March 8, 2002 at 2:08 am

    damn dat is de 2de bug al in korte tijd….
    maar goed dat het veiliger is dan telnet 🙂
    alhoewel ? 😉

  2. Anonymous says

    March 12, 2002 at 12:52 am

    De bug is (waarschijnlijk) niet exploitable onder *BSD.

  3. Anonymous says

    March 19, 2002 at 10:13 am

Primary Sidebar

Pages

  • Howto overview
  • iPhone mail setup
  • Links

Categories

  • *BSD news from the past
  • Console
  • Firewall
  • FreeBSD
  • FTP server
  • Hardware
  • Howto's
  • Installation
  • Kernel
  • Mail server
  • Miscellaneous
  • Networking
  • News
  • News imported
  • OpenBSD
  • Operating System
  • Programming
  • Security
  • Site news
  • Software
  • Sysutils
  • Web server

Recent Comments

  • admin on Qmail FreeBSD Mail Toaster Spam en virus control addon
  • admin on [FreeBSD] Het opzetten van een Vlan
  • Jap on [FreeBSD] Installing GlFtpd
  • Jap on [FreeBSD] Installing GlFtpd
  • Crashjuh on Wireless access point met OpenBSD + VPN

Copyright © 2025 · Genesis Sample Theme on Genesis Framework · WordPress · Log in