oss-security - Re: openssh CVE-2008-1657 question

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Tue, 6 May 2008 18:28:10 -0600
From: Vincent Danen <vdanen@...sec.ca>
To: oss-security@...ts.openwall.com
Subject: Re: openssh CVE-2008-1657 question

* [2008-05-06 22:42:30 +0200] Nico Golde wrote:

>Hi Vincent,
>* Vincent Danen <vdanen@...sec.ca> [2008-05-06 21:52]:
>> Out of curiousity, CVE-2008-1657 should only affect 4.4-4.9, correct?
>> The ForceCommand functionality was introduced in 4.4.
>
>Yep that's correct.

Thanks for the confirmation, Nico.

-- 
Vincent Danen @ http://linsec.ca/

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.