Debian update for OpenSSH - Secunia Advisories - Vulnerability Intelligence

Debian update for OpenSSH
Secunia Advisory:	SA9748	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2003-09-16
Last Update:	2003-09-22
Popularity:	5,782 views

Critical:	Highly critical
Impact:	DoS System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Debian GNU/Linux 3.0

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2003-0682 CVE-2003-0693 CVE-2003-0695

Description: Debian has issued updated packages for ssh. These fix a vulnerability, which potentially can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system. For more information: SA9743 Solution: Updated packages: -- Debian GNU/Linux 3.0 alias woody -- Source archives: http://security.debian.org/pool/updates/main/o/OpenSSH/OpenSSH_3.4p1.orig.tar.gz Size/MD5 checksum: 837668 459c1d0262e939d6432f193c7a4ba8a8 http://security.debian.org/pool/updat...enSSH/OpenSSH_3.4p1-1.woody.3.diff.gz Size/MD5 checksum: 36523 b264717da79efedfbaaecfede3ec5934 http://security.debian.org/pool/updat...o/OpenSSH/OpenSSH_3.4p1-1.woody.3.dsc Size/MD5 checksum: 1350 bf5970e940e1d5bf7345a1d9e778d7f4 alpha architecture (DEC Alpha) http://security.debian.org/pool/updat...kpass-gnome_3.4p1-1.woody.3_alpha.deb Size/MD5 checksum: 35900 634340333420155ddaf6f70fab3fbd59 http://security.debian.org/pool/updat...OpenSSH/ssh_3.4p1-1.woody.3_alpha.deb Size/MD5 checksum: 850196 c9e82af3e9f16941c64d0ae478e1f184 arm architecture (ARM) http://security.debian.org/pool/updat...askpass-gnome_3.4p1-1.woody.3_arm.deb Size/MD5 checksum: 35132 b7c3431b949c24cf1c040be28e06fbbf http://security.debian.org/pool/updat...o/OpenSSH/ssh_3.4p1-1.woody.3_arm.deb Size/MD5 checksum: 658324 5ac2853c07e93bc498aadcc63565bb82 hppa architecture (HP PA RISC) http://security.debian.org/pool/updat.../OpenSSH/ssh_3.4p1-1.woody.3_hppa.deb Size/MD5 checksum: 755910 14d426db61713617a1e914bd1c675b07 http://security.debian.org/pool/updat...skpass-gnome_3.4p1-1.woody.3_hppa.deb Size/MD5 checksum: 35494 714c4e74169c5985ad745f8928d1e831 i386 architecture (Intel ia32) http://security.debian.org/pool/updat...skpass-gnome_3.4p1-1.woody.3_i386.deb Size/MD5 checksum: 35414 ab621997a28bc30c928c2d317ae0c3a9 http://security.debian.org/pool/updat.../OpenSSH/ssh_3.4p1-1.woody.3_i386.deb Size/MD5 checksum: 642624 a4293645b075984afa600f8094395c2d ia64 architecture (Intel ia64) http://security.debian.org/pool/updat.../OpenSSH/ssh_3.4p1-1.woody.3_ia64.deb Size/MD5 checksum: 1002720 ac989f421d1de08ce6487060ce231968 http://security.debian.org/pool/updat...skpass-gnome_3.4p1-1.woody.3_ia64.deb Size/MD5 checksum: 36906 45b3a0b3f0564cc6688fab9bc2bceee1 mipsel architecture (MIPS (Little Endian)) http://security.debian.org/pool/updat...penSSH/ssh_3.4p1-1.woody.3_mipsel.deb Size/MD5 checksum: 727514 4b667b3d8306af3eb8073e66932c853d http://security.debian.org/pool/updat...pass-gnome_3.4p1-1.woody.3_mipsel.deb Size/MD5 checksum: 35384 2395ff7a07f5d4e255844d0f608a8161 powerpc architecture (PowerPC) http://security.debian.org/pool/updat...enSSH/ssh_3.4p1-1.woody.3_powerpc.deb Size/MD5 checksum: 681524 f8f9c03826fce1dccc16c7d47b93a376 http://security.debian.org/pool/updat...ass-gnome_3.4p1-1.woody.3_powerpc.deb Size/MD5 checksum: 35150 b6a0d8c9edf371d118dd32d503102c6c s390 architecture (IBM S/390) http://security.debian.org/pool/updat.../OpenSSH/ssh_3.4p1-1.woody.3_s390.deb Size/MD5 checksum: 718140 97e5e2e22860eb74d336e2938286d7a7 http://security.debian.org/pool/updat...skpass-gnome_3.4p1-1.woody.3_s390.deb Size/MD5 checksum: 35786 97f0c72c5d72b61b5fe9c0c2a1d278be sparc architecture (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updat...OpenSSH/ssh_3.4p1-1.woody.3_sparc.deb Size/MD5 checksum: 686130 d44dec2bc9161419f71f769fff78f95b http://security.debian.org/pool/updat...kpass-gnome_3.4p1-1.woody.3_sparc.deb Size/MD5 checksum: 35202 1b2eb82ad15a4209237a61000dc63c3c Changelog: 2003-09-17: Updated advisory with links to new packages. These packages also fixes CAN-2003-0695. 2003-09-18: Updated advisory with links to ssh-krb5 packages. 2003-09-22: New packages issued to fix some memory bugs. Added CVE reference CAN-2003-0682. Original Advisory: http://lists.debian.org/debian-securi...-security-announce-2003/msg00187.html http://www.debian.org/security/2003/dsa-382 http://www.debian.org/security/2003/dsa-383 Other References: SA9743: http://secunia.com/advisories/9743/

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	24
New vulnerabilities:	39
Updated advisories:	41

Moderately // 139 views

mvnForum Unspecified Cross-Site Scripting and Request Forgery

Less // 148 views

Debian update for awstats

Moderately // 157 views

Kolab Server ClamAV Multiple Vulnerabilities

Less // 219 views

Movable Type Unspecified Cross-Site Scripting Vulnerability

Moderately // 203 views

Sunbyte e-Flower "id" SQL Injection Vulnerability

Not // 230 views

SUSE update for kernel

Not // 298 views

HP-UX Unspecified Local Denial of Service Vulnerability

Moderately // 271 views

WebGUI Executable Attachments Vulnerability

Moderately // 396 views

SquirrelMail Malformed HTML Mail Message Script Insertion

Less // 383 views

VMware ESX Server update for bzip2

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.