Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Vulnerabilities in Portable OpenSSH

Posted by michael on from the will-get-it-right-eventually dept.

An anonymous reader writes "The OpenSSH team has uncovered multiple exploitable vulnerabilities in the days-old portable release of OpenSSH. That's right folks: time to patch *again*. 3.7.1p2 is now available. Instructions and mirror list here. Please note that this vulnerability only affects *portable* OpenSSH--so if you are running OpenBSD, you're safe. This vulnerability apparently has to do with PAM, so you can use the 'UsePam no' option in your config file. Info on the advisory here and here."

7 of 324 comments (clear)

  1. hmm by tedtimmons · · Score: 4, Funny

    Who is pam, and what did she have to do with openssh?

    -ted

    1. Re:hmm by r_j_prahad · · Score: 4, Funny

      Pam was my ex-wife. She was pluggable by too many.

  2. A solution? by gpinzone · · Score: 4, Funny

    This vulnerability apparently has to do with PAM, so you can use the 'UsePam no' option in your config file.

    Wouldn't that prevent anyone from loging-in? I guess that's a solution. Why not disconnect the network cable, too?

  3. Time for a new spin on security practices? by Anonymous Coward · · Score: 4, Funny

    Maybe the OSS community needs a Trustworthy Computing initiative =]

  4. When will it end? by Dr.+Bent · · Score: 3, Funny

    This vulnerability apparently has to do with PAM

    When will people learn that non-stick cooking spray causes more harm than good? Unneeded fat, calories and remote root exploits are just some of the problems caused by these unsavory products. For god's sake, people...there are better ways to dissipate heat and prevent sticking and burning. For one, turn that CPU clock speed down! Just because you can fry an egg on your motherboard, doesn't mean you should! That's what the CD-ROM drive is for!

  5. New Motto by Greyfox · · Score: 4, Funny

    15^H^H10 minutes without a remote root exploit!

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  6. Yippee! by mrpuffypants · · Score: 4, Funny

    oooh! Patching every other day is fun!

    This is just like being a MCSE! Now I can hang out with the NT guys and chat about patching!