Re: SSH 2.4.0/3.0.1 usernames guessable ?

From: Marco van Berkum (m.v.berkumat_private)
Date: Wed Sep 05 2001 - 01:32:40 PDT

Next message: DerHexXerat_private: "Re: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)"

Previous message: Franklin DeMatto: "asm shellcode techniques (especially relevant for win32)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Just recieved response from ssh.com regarding this issue.

<snip>

>    Thanks for the report. This was an server-side issue in 2.4.0,
>    and was fixed in 3.0.0. As the output included in your message
>    shows, it happens only with the server version 2.4.0, not with
>    server version 3.0.1.

</snip>

I guess this is the answer we were looking for.

grtz,
Marco van Berkum
--
GCC dpu s:--- a- C+++ US++++ P++ L+++ E---- W N o-- K w---
O- M-- V-- PS+++ PE-- Y+ PGP--- t--- 5 X R* tv++ b+++ DI-- D----
G++ e- h+ r y*
+---------------------+------------------+-------------------+
|  Marco van Berkum   |   MB17300-RIPE   | Security Engineer |
|  http://ws.obit.nl  | "Chernobyl used  | Network Admin     |
|  m.v.berkumat_private |     Windows"     |      UNIX         |
+---------------------+------------------+-------------------+

Next message: DerHexXerat_private: "Re: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)"
Previous message: Franklin DeMatto: "asm shellcode techniques (especially relevant for win32)"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Sep 05 2001 - 08:28:51 PDT