OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Niels Provos (provosCITI.UMICH.EDU)
Date: Thu Feb 08 2001 - 14:52:59 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    In message <073f01c09136$ddc04240$2e58a8c0ffornicario>, =?iso-8859-1?Q?Iv=E1n_
    Arce?= writes:
    > OpenSSH
    > The vulnerability is present in OpenSSH up to version 2.3.0,
    > although it is not possible to exploit it due to limits imposed
    > on the number of simultaneous connections the server is allowed
    > to handle,
    This is a confusing way to put it. This attack is not feasible on
    OpenSSH. The connection limits takes care of it. If you are running
    OpenSSH 2.3.0, you are completely fine.

    Niels.