5 ms·

What would be the best way to go if using Debian 5 (lenny)? The only service exposed is ssh, and no one outside the company has an account. Is it still vulner

What would be the best way to go if using Debian 5 (lenny)? The only service exposed is ssh, and no one outside the company has an account. Is it still vulnerable through ssh?

baq 12y ago
see http://seclists.org/oss-sec/2014/q3/651 http://seclists.org/oss-sec/2014/q3/651. can't say i understood much, but the answer i can give is 'likely'.
mdeeks 12y ago
No, they would need a valid SSH account and password/key.