BSD BLOG DOT COM » Damien Miller (djm@) Responds to Plaintext Recovery Attack Against SSH

   .-.
_.'   '.
   .    )
_.'   .'
(    (
 '.   '.
   )    )
 .'   .'
(    (
 '.   '.
   )    )
 .'   .'
(    (
 '.   '.
_  '    )
 '.   .'
   '-'

   .-.   
 .'   '._
(    .   
 '.   '._
   )    )
 ,'   ,' 
(    (   
 '.   '. 
   )    )
 ,'   ,' 
(    (   
 '.   '. 
   )    )
 ,'   .' 
(    '  _
 '.   .' 
   '-'

       _       _       _       _       _       _       _       _       _
'.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .'
  '-'  _  '-'  _  '-'  _  '-'  _  '-'  _  '-'  _  '-'  _  '-'  _  '-'  _  '-'  
'.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .' '.   .'
  '-'     '-'     '-'     '-'     '-'     '-'     '-'     '-'     '-'     '-'

  .-.     .-.     .-.     .-.     .-.     .-.     .-.     .-.     .-.     .-.
.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '. 
  .-.     .-.     .-.     .-.     .-.     .-.     .-.     .-.     .-.     .-.  
.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '._.'   '.

__________  ________________    __________.____    ________    ________  ________  ___________________ _________ ________     _____   
\______   \/   _____\______ \   \______   \    |   \_____  \  /  _____/  \______ \ \_____  \__    ___/ \_   ___ \\_____  \   /     \  
 |    |  _/\_____  \ |    |  \   |    |  _/    |    /   |   \/   \  ___   |    |  \ /   |   \|    |    /    \  \/ /   |   \ /  \ /  \ 
 |    |   \/        \|    `   \  |    |   \    |___/    |    \    \_\  \  |    `   \    |    \    |    \     \____    |    \    Y    \
 |______  /_______  /_______  /  |______  /_______ \_______  /\______  / /_______  \_______  /____|     \______  \_______  \____|__  /
        \/        \/        \/          \/        \/       \/        \/          \/        \/                  \/        \/        \/ 
_..--((Bringing everything BSD to you.))--.._

Damien Miller (djm@) Responds to Plaintext Recovery Attack Against SSH

---> Posted by BSD Blog @ November 21, 2008 at 10:00 pm
---> In category: OpenBSD
---> 0 Comments

==================================================[ START ]====

Damien Miller (djm@) issued the following advisory regarding the recent attack against SSH:

OpenSSH Security Advisory: cbc.adv

Regarding the “Plaintext Recovery Attack Against SSH” reported as
CPNI-957037:

The OpenSSH team has been made aware of an attack against the SSH
protocol version 2 by researchers at the University of London.
Unfortunately, due to the report lacking any detailed technical
description of the attack and CPNI’s unwillingness to share necessary
information, we are unable to properly assess its impact.

Read more…

====================================================[ END ]====

===============================================================

No Comments »

No comments yet.

RSS feed for comments on this post.

===============================================================

Leave a comment