Re: [cobalt-security] New Qube2 Security Patch: Vacation Mail Exploit 3.0.1

[Gerald waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

James Hoaggs wrote:
> 
> FYI,
> Security: Vacation Mail Exploit 3.0.1
> HTTP  Qube2-All-Security-3.0.1-6453.pkg  8424 bytes  Posted: October
> 20, 2000
> This update fixes a security issue related with user's vacation mail.
> 
> http://www.cobalt.com/support/download/qube2.eng.html
> 
> BTW, has anyone installed the OpenSSH Server Release 2.1.1p2 and 2.1.1p1
> packages from http://pkg.nl.cobalt.com/ ?
> There are 2 packages instructed for install for the Qubes and Raqs, Server(p2)
> and Client(p1), though SSH Server works if you just install the Server(p2)
> package.  What is the reason to install the client package on the Server
> described as "Optionally you can extend this software with the available
> client pkg"? Does it mean that you can telnet in and then use a SSH client
> on the Server to SSH to another machine?
> Thanks for the clarification,
> --
EXACTLY!!!