Re: OpenSSH - remote exploit - any reported cases?

[Diyan Christian <sauron@lug.stikom.edu>]

On some email I received,
> Message-ID: <001b01c228d2$95f108c0$1400020a@chaser>
> Reply-To: "Kurt Seifried" <openbsd@seifried.org>
> From: "Kurt Seifried" <openbsd@seifried.org>
> To: <misc@openbsd.org>
> Subject: OpenSSH - remote exploit - any reported cases?
> Date: Thu, 11 Jul 2002 06:00:44 -0600
> 
> Just that. Are there any reported cases of remote compromise of a system due
> to the challenge response bug (any system, openbsd or otherwise)? Or even
> good suspicious cases?
> 
> In other words did anyone actually actively exploit the first remote hole in
> the default install in 6 years?

nope, but several of my hosts had an increasing scans for ssh port from the 
internet recently, does anybody have snort signature on this?


regards,
Diyan Christian

--
@ IN SOA lug.stikom.edu. oblek.lug.stikom.edu.

"My programs doesn't contains bugs,
they just develops random features"