full-disclosure - Re: [Rumor] SSH (non)0-day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 9 Jul 2009 16:51:20 -0700
From: Robert Kim Wireless Internet Advisor <evdo.hsdpa@...il.com>
To: Matt <weysec@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [Rumor] SSH (non)0-day

You guys on twitter? lemme know what your @ is... im @journik
it'll be wayyyy easier.


On Thu, Jul 9, 2009 at 11:04 AM, Matt<weysec@...il.com> wrote:
> Not to incite the riot that always follows this type of comment, but this
> attach does not match 0-day requirements. It is only for older versions,
> meaning that if you patched your OpenSSH two or three months ago when they
> released the patches for a security issue that was not yet in the wild then
> you would not have an issue with this supposed 0-day. It is only a 0-day if
> you failed to follow patching procedures or were not paying attention to the
> original patch several months ago.
>
> Please oh trollers, troll away. But can we please move on to real topics.
> You guys are making me miss NetDEV and his useless conversations on this
> list.
>
>
>
>
> Sent to you by Matt via Google Reader:
>
>
>
>
> Re: [Rumor] SSH 0-day
>
> via Full Disclosure (fulldisclosure) Mailing List on 7/9/09
> Posted by James Matthews on Jul 9
>
> I am worried that if it is an OpenSSH 0day how much damage should I expect.
> However SANS doesn't seem to think it's real.
>
> James
>
> On Thu, Jul 9, 2009 at 12:46 PM, Kaspar Mendev <kaspar.m_at_gmx.com> wrote:
>
>> See also their update http://isc.sans.org/diary.html?storyid=6760
>>
> ...
>
>
>
>
> Things you can do from here:
>
> Subscribe to Full Disclosure (fulldisclosure) Mailing List using Google
> Reader
> Get started using Google Reader to easily keep up with all your favorite
> sites
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Robert Q Kim, Wireless Internet Provider
http://journik.com
http://journik.posterous.com
http://twitter.com/journik

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/