[rootshell] Security Bulletin #25

Tue Nov 3 14:04:26 UTC 1998

At 09:44 PM 11/2/98 -0800, Roeland M.J. Meyer wrote:
>
>We plopped v1.2.21 into production over a year (Aug97) ago. We use the
>F-secure WinNT client. We have not seen compelling reason to upgrade.
>Insignificat additional features and huge risk that our WinNT clients would
>also have to be upgraded. I am not aware of published exploits against this
>version, or higher, of SSH.
>

Right. The kicker for me has been that i can't get a V1 client to work with
V2 sshd (and BTW i can't get a V2 client to work with V1 sshd). So this
would mean a wholesale upgrade of all clients, including Windex ones...

Joe Loiacono                             Phone: (301) 794-2509
Computer Sciences Corporation            Fax:   (301) 794-9530