version 1.19, 2002/06/29 14:58:53 |
version 1.20, 2002/06/30 22:06:56 |
|
|
<p> |
<p> |
<a name=sshdauth></a> |
<a name=sshdauth></a> |
<li><font color=#009000><strong>024: SECURITY FIX: June 24, 2002</strong></font><br> |
<li><font color=#009000><strong>024: SECURITY FIX: June 24, 2002</strong></font><br> |
All versions of OpenSSH's sshd between 2.9.9 and 3.3 contain an input validation |
All versions of OpenSSH's sshd between 2.3.1 and 3.3 contain an input validation |
error that can result in an integer overflow and privilege escalation. |
error that can result in an integer overflow and privilege escalation. |
This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH |
This problem is fixed in <a href="http://www.openssh.com/openbsd.html">OpenSSH |
3.4</a>, and a patch for the vulnerable releases is available as part of the |
3.4</a>, and a patch for the vulnerable releases is available as part of the |