Date: Fri, 9 Feb 2001 09:59:34 +0100
From: =?iso-8859-2?Q?Tomasz_Ku=BCniar?= <[email protected]>
To: [email protected]Subject: Bug in ssh client (open ssh 2.3.0)
hi,
When Michal Zalewski found bug in ssh, most people tried to reinstall
their ssh. They usualy install openssh 2.3.0 or higher, or ssh2.com
Well, it could not be the best fix using openssh client 2.3.0p1 (i dont
check other ver.).
I've compile it from sources, so look at it:
mezon@ania:~$whereis ssh
ssh: /usr/local/bin/ssh
mezon@ania:~$ls -al /usr/local/bin/ssh
-rws--x--x 1 root root 663364 Feb 8 14:48
/usr/local/bin/ssh*
mezon@ania:~$ssh mezon@ania
mezon@ania's password:
Segmentation fault
mezon@ania:~$
When it crash? heh, there must be some conditions:
1. on my host : mist be typed "ssh -l mezon ania" or ssh mezon@ania
(When using full ip or address it will not segv)
2. when password prompted, You will have to type some chars, then
press <BACKSPACE> button , and next <ENTER>
Ssh client is suid, so it could be real problem. Must check source...
Mezon
--
Tomasz Kuzniar <[email protected]>
* Polska Platforma Internetowa *
~ ~ ~
"Wioska zabita dechami - Village killed by desks"
