SSH Communications Security Information for VU#978316
Vulnerability in OpenSSH daemon (sshd)
- Vendor Information Help Date Notified: 06 Jun 2003
- Statement Date:
- Date Updated: 14 Jul 2003
Since 3.0.0, SSH Secure Shell server has had an additional specifier for matching with the host addresses, which can be used to only match IP-addresses or IP-masks. For example, one could specify
Since 3.1.0, a specifier for address masks was added.
The specifiers are to be prepended to the address, and are "\i" and "\m", respectively.
Thus, SSH Secure Shell daemon is not vulnerable to this, if these specifiers are used.
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.
If you have feedback, comments, or additional information about this vulnerability, please send us email.