full-disclosure - OpenSSH exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20030917000701.0C44C8F@coconut.itojun.org>
From: itojun at itojun.org (Jun-ichiro itojun Hagino)
Subject: OpenSSH exploit

> Is there a complete list of vulnerable versions of OpenSSH including 
> the 2.x branches?  In other words how far back does this issue go?

	as far as i see buffer.c issue goes back to revision 1.1 (= import
	from tatu's original ssh).

itojun