On Tue, 16 Sep 2003 13:13:51 EDT, "Jonathan A. Zdziarski" <jonathan@xxxxxxxxxxxxxxxxxxx> said: > Does anyone know if this vulnerability is present in the free > noncommercial ssh distribution from ssh.fi? Looking at the relevant code in ssh 3.2.5, it appears not, as the ssh.com code was already using a temp variable the same way that the openssh code added one.
Attachment:
pgp00035.pgp
Description: PGP signature