ssh security holes

[gboyce at badbelly.com (gboyce)]

On Tue, 5 Sep 2006, Stephen Adler wrote:

> Guys,
>
> I'm working with a company who has an old version of ssh installed,
>
>  OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.7d 17 Mar 2004
>
> Is there a way to find out if this version of ssh has any vulnerabilities?
>
> Steve.

Your best bet is to look for security fixes released by the particular 
vendor.  Is this system running Redhat?  Debian?

--
Greg

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.