Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: OpenSSH 4.4 (and 4.4p1) released - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
OpenSSH 4.4 (and 4.4p1) released
Version 4.4 (and 4.4p1) of OpenSSH was released yesterday.  Among other things, it fixed the vulnerability announced earlier this week (CVE-2006-4924) in the CRC compensation attack detector that allowed for a denial of service if using SSH protocol verion 1 (which hopefully no one is using anymore anyway due to the other weaknesses in the protocol).

See http://www.openssh.com for more details.
Jim

402 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!