2 ms·
If it's fixed in the latest OpenSSH, it's not a 0-day exploit, is it?
by mcav 17y ago
If it's fixed in the latest OpenSSH, it's not a 0-day exploit, is it?
- sucuri2 17y agoTechnically it is a 0-day exploit (not published and unknown) but that only works on older versions of SSH. However, the default version on RHEL, Fedora are vulnerable. So, it is a big issue if there is no patch from your distribution (unless you use ssh from source which is not common).
- jacquesm 17y agoIf this is real it's a biggie, there are hundreds of thousands of machines running openssh 4.3. better check those firewall settings.