RE: [Full-Disclosure] new ssh exploit?

["Aditya" <aditya@xxxxxxxxxx>]

SSH over VPN ? whould this be more secure or 
Telnet ( no i dont use this ) over VPN 

------ 

Aditya Lalit Deshmukh,

  _____  

Chief Security Officer &
System and Network Administrator,
Electronic Security Division,
Enterprise Security Solutions, Inc 


-----Original Message-----
From: full-disclosure-admin@xxxxxxxxxxxxxxxx
[mailto:full-disclosure-admin@xxxxxxxxxxxxxxxx]On Behalf Of Michael
'Moose' Dinn
Sent: Wednesday, September 17, 2003 5:19 AM
To: full-disclosure@xxxxxxxxxxxxxxxx
Subject: Re: [Full-Disclosure] new ssh exploit?




Looks like 3.7.1p1 was just released, following up to 3.7p1 earlier today.

For those who have patched, looks like it's time to patch again...


-- 
 Michael 'Moose' Dinn, Twisted Pair Network Consulting Incorporated
 dinn@xxxxxxxxxxxxxx // 902 423 4700 (voice) // 902 423 8407 (fax)

 Colocate your server in our underground bunker!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


________________________________________________________________________
Delivered using the Free Personal Edition of Mailtraq (www.mailtraq.com)

BEGIN:VCARD
VERSION:2.1
N:Deshmukh;Aditya;Lalit
FN:Aditya Lalit Deshmukh
NICKNAME:Aditya
ORG:Enterprise Security Solutions;Electronic Security
TITLE:Chief Security Officer, System and Network Administrator
NOTE;ENCODING=QUOTED-PRINTABLE:Contact for Enterprise Security Solutions for 
:-=0D=0ASecuring Servers and C=
lients for Airtight Security, Penetration Testing of Internet and Intranet s=
ervers, Securing existing Networks, Commissioning New Networks, Virtual Priv=
ate Networks (VPN), Public Key Infrastructures (PKI), Managed Security Solut=
ions for Firewalls (FW) and Intrusion Detection Systems (IDS), Bandwidth Pla=
nning, Management and Utilization, Firewall testing & configuration, Venerab=
ility scanning & resolution, Web Applications Testing, Source code audit for=
 Vulnerabilities, Computer Security Policy formulation, Tracking security Po=
licy in-compliances, Digital investigations and forensics, Computer Security=
 Audits, Biometric security system implementations, Setting up network manag=
ement system (NMS), Monitoring of Security Incidences, Proper Incidences and=
 Vulnerabilities reporting and resolution.=0D=0AThis is my photo in PGP Key.=
...  
TEL;WORK;VOICE:+91 (721) 2530 475
TEL;HOME;VOICE:+91 (721) 3153 428
TEL;CELL;VOICE:+91 (982) 2222 355
TEL;PAGER;VOICE:919822222355@xxxxxxxxxxx
TEL;WORK;FAX:+91 (721) 2530 539
TEL;HOME;FAX:+91 (721) 2530539
ADR;WORK;ENCODING=QUOTED-PRINTABLE:;Systems Security & Administation;22, 
Saurabh Colony,=0D=0AV.M.V Road,;Amrav=
ati, Maharashtra;;444604;India
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:Systems Security & Administation=0D=0A22, 
Saurabh Colony,=0D=0AV.M.V Road,=
=0D=0AAmravati, Maharashtra 444604=0D=0AIndia
ADR;HOME;ENCODING=QUOTED-PRINTABLE:;;22, Saurabh Colony,=0D=0AV.M.V 
Road;Amravati;Maharashtra;444604;India
LABEL;HOME;ENCODING=QUOTED-PRINTABLE:22, Saurabh Colony,=0D=0AV.M.V 
Road=0D=0AAmravati, Maharashtra 444604=0D=0AI=
ndia
X-WAB-GENDER:2
URL;WORK:http://earth.prohosting.com/ess2001
ROLE:Computer Security Consultant
BDAY:19791006
KEY;X509;ENCODING=BASE64:
    MIIFgTCCBGmgAwIBAgIRAKxYY2ACQ55LsM0S4nt/sf4wDQYJKoZIhvcNAQEFBQAwgdwxCzAJ
    BgNVBAYTAkdCMRcwFQYDVQQKEw5Db21vZG8gTGltaXRlZDEdMBsGA1UECxMUQ29tb2RvIFRy
    dXN0IE5ldHdvcmsxRjBEBgNVBAsTPVRlcm1zIGFuZCBDb25kaXRpb25zIG9mIHVzZTogaHR0
    cDovL3d3dy5jb21vZG8ubmV0L3JlcG9zaXRvcnkxHzAdBgNVBAsTFihjKTIwMDIgQ29tb2Rv
    IExpbWl0ZWQxLDAqBgNVBAMTI0NvbW9kbyBDbGFzcyAzIFNlY3VyaXR5IFNlcnZpY2VzIENB
    MB4XDTAzMDcxNzAwMDAwMFoXDTA0MDcxNjIzNTk1OVowgeMxNTAzBgNVBAsTLENvbW9kbyBU
    cnVzdCBOZXR3b3JrIC0gUEVSU09OQSBOT1QgVkFMSURBVEVEMUYwRAYDVQQLEz1UZXJtcyBh
    bmQgQ29uZGl0aW9ucyBvZiB1c2U6IGh0dHA6Ly93d3cuY29tb2RvLm5ldC9yZXBvc2l0b3J5
    MR8wHQYDVQQLExYoYykyMDAzIENvbW9kbyBMaW1pdGVkMRgwFgYDVQQDEw9BZGl0eWEgRGVz
    aG11a2gxJzAlBgkqhkiG9w0BCQEWGGFkaXR5YUBvbmxpbmUubmFpbGVkLm9yZzCBnzANBgkq
    hkiG9w0BAQEFAAOBjQAwgYkCgYEA2FvhmGMv9ty3z4i6TH4IiRrHHINEhiun86XQLfgmmgxp
    oGvop+PWl0+/rV2Zfo5Vjos0kWs1Nhujuf8/00sJoxy99ui2Nu/BoY+hUXKUQZT+/lajcA3e
    Mmq6VYnUdsfQrZhmA6ROJinkolS0No7IBU4KseYMBJXNgUR2FBVB7ZkCAwEAAaOCAbcwggGz
    MB8GA1UdIwQYMBaAFPZSIhcVEwgDWb8YlZ9ItLnp/vhmMB0GA1UdDgQWBBT/ujqsIUZ1gf0g
    +Cb6IWv508Ep6TAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAgBgNVHSUEGTAXBggr
    BgEFBQcDBAYLKwYBBAGyMQEDBQIwRgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAQEwKzApBggr
    BgEFBQcCARYdaHR0cHM6Ly9zZWN1cmUuY29tb2RvLm5ldC9DUFMwgbAGA1UdHwSBqDCBpTA4
    oDagNIYyaHR0cDovL2NybC5jb21vZG8ubmV0L0NsYXNzM1NlY3VyaXR5U2VydmljZXNfMi5j
    cmwwOqA4oDaGNGh0dHA6Ly9jcmwuY29tb2RvY2EuY29tL0NsYXNzM1NlY3VyaXR5U2Vydmlj
    ZXNfMi5jcmwwLaAroCmBJ0NsYXNzM1NlY3VyaXR5U2VydmljZXNfMkBjcmwuY29tb2RvLm5l
    dDARBglghkgBhvhCAQEEBAMCBSAwIwYDVR0RBBwwGoEYYWRpdHlhQG9ubGluZS5uYWlsZWQu
    b3JnMA0GCSqGSIb3DQEBBQUAA4IBAQBhVcUi720VWqAJbrb0a1yMkM/iiyUaOylyDB1E/fCX
    XKJspuSJfgCS1DHcWOO8jnGYhUUGI5YLBvIN/OJMePe845RF4RFkZ2L1ObBy+9ib/z9uBOYy
    7hsTXqQegEwVu/hJ3NZvC1F+Ow4Lz0ju06cvPthEjmHQyHyIThh7Wv7abAwUftyzCgdK1fJB
    Ce3UeoUJU9RRK3bWtvWPqffECQv0eNGvbe10PSDvCpxERqp0ivNxZBT25c42KyQDXoUYQxMG
    J7YukkpKN2QTRPQqt9JpNaOSyrO3XNpsoLDsIf1qKFYufxgH/PLNQ/x93Q9GX9PUdMsYhdLY
    QUVunAYYCZlT


EMAIL;PREF;INTERNET:aditya@xxxxxxxxxxxxxxxxx
EMAIL;INTERNET:aditya@xxxxxxxxxxxxxxxxxxxx
EMAIL;INTERNET:hq1eo10ly001@xxxxxxxxxxxxxx
REV:20030915T190705Z
END:VCARD