Nortel Networks Information for VU#369347

Vulnerability
Notes
Database

View Notes By

Name

Other Documents

Technical Alerts

Nortel Networks has concluded its portfolio review and has determined that the following two products are shipped with OpenSSH:

In STORM, release SN04, the challenge response authentication feature is not used and therefore Nortel Networks recommends that it be disabled, which will not impact the product. The recommendations in CERT Advisory CA-2002-18 to disable features should be followed.
The SFTP sshd server on the SuperNode Data Manager is not affected by the vulnerabilities noted in CERT Advisory CA-2002-18 because the challenge response and separation of privileges mechanisms are not enabled as shipped with ASG Passwerks v3.x.

The core OpenSSH distribution will be upgraded to v3.4 with the SN05 release.

For more information please contact Nortel at:

Contacts for other regions are available at

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Produced 2008 by US-CERT, a government organization
Disclaimers and copyright information