[24585] in bugtraq
Re: [ESA-20020307-007] Local vulnerability in OpenSSH's channel
daemon@ATHENA.MIT.EDU (Ryan W. Maple)
Fri Mar 8 04:39:10 2002
Date: Thu, 7 Mar 2002 13:19:59 -0500 (EST)
From: "Ryan W. Maple" <ryan@guardiandigital.com>
To: engarde-security@guardiandigital.com
Cc: bugtraq@securityfocus.com
In-Reply-To: <20020307163902.69F8E11D317@juggernaut.guardiandigital.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Message-Id: <20020307182004.1A48411D304@juggernaut.guardiandigital.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thu, 7 Mar 2002, EnGarde Secure Linux wrote:
> REFERENCES
> ----------
> Guardian Digital's public key:
> http://ftp.engardelinux.org/pub/engarde/ENGARDE-GPG-KEY
>
> Credit for the discovery of this bug goes to:
> Joost Pol <joost@pine.nl>
>
> OpenSSH's Official Web Site:
> http://www.openssh.org/
>
> Security Contact: security@guardiandigital.com
> EnGarde Advisories: http://www.engardelinux.org/advisories.html
Brian Hatch <bri@onsight.com> contacted us pointing out that OpenSSH's
official site is openssh.com, not openssh.org. I apologize to the
OpenBSD and OpenSSH teams for this mistake.
Cheers,
Ryan
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE8h69SIwAIA9MpKWcRAtjYAJwIcwUwf0K/47E6R75LKAfj42BSngCdHkE8
Ho0rYqTD1bAkZTczqFGrA0o=
=PbJI
-----END PGP SIGNATURE-----