Notified: November 27, 2002 Updated: November 27, 2002
Cray Inc. supports the OpenSSH product through their Cray Open Software (COS) package. COS 3.3, available the end of December 2002, is not vulnerable. If a site is concerned, they can contact their local Cray representive to obtain an early copy of the OpenSSH contained in COS 3.3.
The vendor has not provided us with any further information regarding this vulnerability.
According to information on the CrayDoc web site, Cray Open Software 3.2 includes OpenSSH 3.4p1: http://www.cray.com/craydoc/manuals/S-2350-32/html-S-2350-32/zfixedegeqfbpi.html#Z1014921192FXB For information about OpenSSH please see the OpenSSH vendor record.