ssh/rsaref bo exploit code

From: Iván Arce (core.lists.bugtraq@CORE-SDI.COM)
Date: Thu Dec 16 1999 - 14:08:34 PST

  • Next message: Rob Jones: "Re: Reinventing the wheel (aka "Decoding Netscape Mail passwords")"

    Well, for all of you  having problems with the diffs posted for the ssh
    exploit,
    the source distribution of ssh-1.2.27 with the modifications for the
    exploit
    and a binary for Linux Redhat 6.0 can be obtained from
    <ftp://ftp.core-sdi.com/pub/exploits/ssh-rsaref-bo>
    
    Please get that before emailing us with complains about it :)
    -ivan
    
    MD5 (README.exploit) = 840dd0e0868812e309c54f11282ba736
    MD5 (exploit_key) = 3a7fd975c8c1466dedba02b39d9cc03c
    MD5 (ssh-exploit.linux-redhat6.0) = fc805dba06638e410ebff1e18faf23d9
    MD5 (ssh-exploit.tgz) = 92eb5f4b431981167a7c2bb3af925057
    
    --
    "Understanding. A cerebral secretion that enables one having it to know
     a house from a horse by the roof on the house,
     It's nature and laws have been exhaustively expounded by Locke,
     who rode a house, and Kant, who lived in a horse." - Ambrose Bierce
    
    
    ==================[ CORE Seguridad de la Informacion S.A. ]=========
    Iván Arce
    Presidente
    PGP Fingerprint: C7A8 ED85 8D7B 9ADC 6836  B25D 207B E78E 2AD1 F65A
    email   : iarce@core-sdi.com
    http://www.core-sdi.com
    Pte. Juan D. Peron 315 Piso 4 UF 17
    1038 Capital Federal
    Buenos Aires, Argentina.              Tel/Fax : +(54-11) 4331-5402
    Casilla de Correos 877 (1000) Correo Central
    ===========================================================
    
    
    
    --- For a personal reply use iarce@core-sdi.com
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 15:21:48 PDT