[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] OT OpenSSH question
- Subject: Re: [cobalt-security] OT OpenSSH question
- From: "Rick Ewart" <cobalt@xxxxxxxxx>
- Date: Wed, 29 Jan 2003 22:13:24 -0500
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> I am upgrading OpenSSH and got errors during the install about priveledge
> separation. I did a quick Google search and was referred to the
> INSTALL/README for OpenSSH. Nothing mentioned there. I have a working 3.5
> install, but I still get vulnerabilities show from SSH due to the
> priveledge separation issue. Is this an issue?
privilege separation was an issue that caused root compromise, IIRC. It was
one of the last vulnerabilities of SSH. I would check out the version at
pkgmaster.com - I know that has all of the latest vulnerabilities
addressed.... Taco and the boys do a good job.
HTH.
Rick