[Sunhelp] SSH on Solaris

[Flynn, Harold M. III]

Latest greatest is 2.0.13, and can be gotten in source at
ftp://ftp.cs.hut.fi.  This is ssh version 2.  Currently, there's problems
with ssh1, and a buffer overflow contained in the rsa code that comes with
it (rsaglue.c if memory serves me correctly).

The other alternative right now is openssh.  This is a free (or as free as
the GPL can be) implementation of the ssh protocol.  More to be seen about
it at http://violet.ibs.com.au/openssh/.  IMO, it's an exciting development,
and doesn't have all the stipulations of ssh2.  However, it's freeware, and
I have yet to research it or test it out extensively.

Hal

Hal Flynn, ICS Inc.        Senior Systems Analyst
Defense   Information   Systems   Agency
flynnh at mont.disa.mil    Commercial:  334-416-3233
DSN:  596-3233


> -----Original Message-----
> From:	Jim Popovitch [SMTP:jimpop at rocketship.com]
> Sent:	Thursday, January 06, 2000 10:23 PM
> To:	sunhelp at sunhelp.org
> Subject:	[Sunhelp] SSH on Solaris
> 
> What version of SSH is currently considered secure (bug-freee)?  I seem to
> recall there being a recent exploit in SSH v1.2.27, but the only Solaris
> pkgs I could find were v1.2.14.  Is Solaris SSH really that out of date or
> do most people just compile it as needed?
> 
> -Jim P.
> 
> 
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp