version 1.404, 2002/06/29 14:58:53 |
version 1.405, 2002/06/30 22:06:56 |
|
|
<p> |
<p> |
<a name=sshd></a> |
<a name=sshd></a> |
<li><font color=#009000><strong>006: SECURITY FIX: June 24, 2002</strong></font><br> |
<li><font color=#009000><strong>006: SECURITY FIX: June 24, 2002</strong></font><br> |
All versions of OpenSSH's sshd between 2.9.9 and 3.3 contain an input validation |
All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation |
error that can result in an integer overflow and privilege escalation. |
error that can result in an integer overflow and privilege escalation. |
This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH |
This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH |
3.4</a>, and a patch for the vulnerable releases is available as part of the |
3.4</a>, and a patch for the vulnerable releases is available as part of the |