Slashdot Mirror


Remote Root Exploit In lsh

skookum writes "After last week's OpenSSH patch-fest, a lot of people suggested GNU lsh as a replacement. Unfortunately, it seems that the lsh team has recently discovered a heap overflow bug of their own that can lead to compromise. An exploit was posted to BugTraq two days ago. Happy patching."

10 of 445 comments (clear)

  1. Have to be happy... by evilviper · · Score: -1, Flamebait

    You've just got to love it, when elitists have to eat their words...

    --
    Slashdot gets worse every day... Pipedot: News for nerds, without the corporate slant
    1. Re:Have to be happy... by Anonymous Coward · · Score: -1, Flamebait

      Thanks for being an asshat!

  2. [OT] Re:How to tell if you are a linux fanatic. by cscx · · Score: -1, Flamebait

    12. You have problems in understanding Windows, and you will blame your own incompetence on Microsoft.

    A former boss of mine had a serious case of #12. He would babble incessantly each day to me about how much Microsoft sucked, Linux is better, blah blah, yet had an incredible difficulty using Office (i.e. Word for simple documents and Outlook for office mail). He always blamed his incompetence on "that stupid Microsoft crap." Yet he would speak every day of the wonders of using vi, and how the office would be so much better "if we all used elm."

    Seriously.

  3. lsh is not secure by Anonymous Coward · · Score: -1, Flamebait

    lsh has had several other severe problems in the last few months as can be referenced here.

  4. Re:How to tell if you are a linux fanatic. by Anonymous Coward · · Score: -1, Flamebait

    How does it feel to get fucked in the ass by microsoft you little bitch. They probobly didn't even pay you for your hard work in converting us to devil worship.

  5. Re:How to tell if you are a linux fanatic. by Trolling4Dollars · · Score: -1, Flamebait

    Wow. You really have a lot to learn about computers don't you? That's OK. We all have to start somewhere. You should check into some of the basic computer literacy classes offered at your local continuing education facility. After that, you can move onto a computer tech job and get some real world experience. Then, you might be ready to move on to a real IT position and work with more platforms than MS Windows or Slowlaris. After you have as much experience with multiple platforms as a seasoned IT professional, then maybe, just maybe, you'll see the beauty of an OS like Linux. For now, your license to comment is invalid.

  6. Re:Can someone explain to me why.. by Anonymous Coward · · Score: -1, Flamebait

    OpenSSH is fantastic? What are you, stupid?

    Unless, of course, your definition of "fantastic" includes tons of bugs.

  7. Re:How to tell if you are a linux fanatic. by Anonymous Coward · · Score: -1, Flamebait

    line length filler against stupid /. filters: oevuvcef7wty cegfvebxebefwt8 bxtxwvexvqewr6vrhubvrwv wbvv vrbvwrwryobvruv vw9oervgwy0yvh4 4v 280v g0 74g0v dso efw7yg08w v79v 70rg7v few7g89v 79v vw6 vw789 wv9 vwt68 evw7v wvwe79 ev9v ev 8erqwg vew v4v 79veb wev v wvwg9bvgtbvwet76 vdb0792f7 h2cvow y w5fi 2t60v7tyiq xf c36q8 iorpnwjuinwvr 8wre0vh8 vwe vweu80hv wv v80whv 8wr vwhv vwhvw vh8rty8r vwh0hw0vth w40h v4tw0v4h04vt

    1. You rejuvenate and dance when you hear a windows flaw exposed, but you conveniently ignore the thousands of security flaws exposed in linux.

    Yes. apt-get upgrade. Goodbye.

    2. You yell loudly TROLL! at any person's post or at any person you see posting facts that you do not want to hear about your oh so cool linux.

    All quality trolls modded down as -1 troll get m2'ed unfair.

    3. You know it's a classic case of penis envy,

    Hmm, the only case of penis envy I have is to stallions. But I last longer so I can please mares better.

    4. You hate windows, hate Microsoft, but race to emulate windows, have programs to run office from within linux, and spend a $300 on a Windows emulator, only Windows fools.

    Where? When? Yesterday after some 10 hours of struggling I managed to install win98 and msdos on two separate partitions, without mixing each with the other (try installing windows on d: and then sys a: c: from DOS floppy, goodbye
    windows, even though d: is untouched and I didn't say to install anything on c:)
    Emulation just doesn't do it when it comes to games.

    5. You cannot admit that you don't have professional usage of Linux outside server markets.

    Yes, I cannot. I always found lying difficult.

    6. You cannot admit that most of the joe user out there when told that there is linux will respond, what is that?

    I admit most of joe users are lusers.

    7. You cannot admit that there is no professional printing capabilities in linux.

    Everything in Linux is unproffessional (it's amateur, hobby, after-hours work), isn't it? So what the hell do you demand?

    8. You cannot admit that you are a masochist (otherwise why would someone spend hours playing with scripts, and recompiling programs that are available for Windows?)

    Yes, I am. To spend over 12 hours trying to get user support from Microsoft, oh, that was a painful experience!

    9. You cannot admit that there is no professional desktop publishing done on Linux.

    See point 7.

    10. You cannot admit that no one in their right mind would do professional video editing in Linux.

    See point 7.

    11. You cannot admit that linux sucks when it comes for gaming/home entertainment or education.

    See point 5.

    12. You have problems in understanding Windows, and you will blame your own incompetence on Microsoft.

    Yes. My incompetence is result of braindead support/knowledge base of Microsoft. That thing is just not understandable. One can not be competent in that.

    13. You have problems in pointing a clicking, but have no problems in wading through cryptic scripts written by lunatics.

    Yes, never been good in Quake. Love good RPGs though.

    14. Nothing will get past that shit that fills your head, you will not admit to any facts.

    Hereby I admit to the fact that I use a qwerty keyboard which proves your thesis wrong.

    15. You can't admit that naming of linux components, packages, and others are weird and fits profiles of troubled teenagers. gentoo, lgx, rpm ....

    D0h. If it was "fuck", "booze", "whore", it would. Well, some do. BitchX, crack, fsck... ;)

    16. You feel angered because you were left out by microsoft's Media technologies, they support Mac, Sun sparc, but not linux.

    Could you elaborate on the topic? Haven't heard about that?

    17. You feel inferior deep inside but unable to admit it, you don't have a database as easy and powerful as Access.

    And a graphics editor as

  8. Re:How to tell if you are a linux fanatic. by Anonymous Coward · · Score: -1, Flamebait
    AKA a nazi fanatic loser.
    MS = Nazis, Bill Gates = Hitler So who's the Nazi here you fucking piece of shit?

    1. You rejuvenate and dance when you hear a windows flaw exposed, but you conveniently ignore the thousands of security flaws exposed in linux.
    So you know for certain that I do this? How? Have you been watching me? I think not. I rejoice when a security flaw for any OS is exposed in the hopes that the hole will be fixed. It's just that the free software world is much more responsive than the non-free world. So again I will tell you to go fuck yourself with a hot soldering iron.

    2. You yell loudly TROLL! at any person's post or at any person you see posting facts that you do not want to hear about your oh so cool linux.
    Oh fuck off whiner. If you can't take criticism then get the fuck off of Slashdot you worthless ass.

    3. You know it's a classic case of penis envy, you don't have all the support, software and hardware available for linux and you have to let that anger out somewhere, but you don't have the brains to admit it.
    Let's take that penis thing a little farther faggotass. So let me get this straight? The Microsoft loving dorks like you would rather run around with penis extenders and strap-ons (ie. technical support, and non-free Windows software) rather than using your real cock? The Linux crowd doesn't need prostheses when we've got the real stuff that impresses the ladies so to speak.

    4. You hate windows, hate Microsoft, but race to emulate windows, have programs to run office from within linux, and spend a $300 on a Windows emulator, only Windows fools.
    I hate Windows and I hate Microsoft. In fact I hate the entire Microsoft way. So I have no interest in using anything that resembles Windows. That's why I use Enlightenment for my desktop, Firebird for my mail client, Emacs for text editing and coding and have absolutely no need of any pathetic Office suite. Office suites are for suits with nothing better to do than run a business. Text editors are for real geeks who do real work. Computing is not for the faint of heart. If you can't deal, then get a loser business job somewhere else asshat.

    5. You cannot admit that you don't have professional usage of Linux outside server markets.
    Even if this were true, we should care why? "Professional usage" probably equates to business which I will argue has no purpose other than to put money into the hands of those who least deserve it. This is not what we believe in or care about. Instead we believe in a system where everyone will have free access to computing resources in perpetuity. Just like the air we breathe. If you can't envision something like that, it's time for you to die out with the rest of the dinosausrs of the old business world.

    6. You cannot admit that most of the joe user out there when told that there is linux will respond, what is that?
    Joe User isn't the target at the moment. One thing you need to consider is that Linux is never going to go away no matter how much you and your loser sympathizers wish it will. You can't win.

    7. You cannot admit that there is no professional printing capabilities in linux.
    Why would we care about printing in a world were all documents are virtual? Paper is incredibly out of date.

    8. You cannot admit that you are a masochist (otherwise why would someone spend hours playing with scripts, and recompiling programs that are available for Windows?)
    Whatever shortcomings in logic you may suffer from is no concern of ours. If you can't deal with coding, then you shouldn't use a real OS. As far as masochism is concerned, again I have to point to you. You are willing to bend over and let Microsoft tell you when to jump and how high. Sounds pretty masochistic to me. But I can understand your confusion since most victims wind up developing a co-dependent relationship with the abuser.

    9. You cannot admit that there is no professi

  9. djb where are you? by Anonymous Coward · · Score: -1, Flamebait

    Please djb write a secure shell that is actually secure. Fuck all the "free" software folks, because sometimes we just want open source software that is secure the first time out.