• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Portable OpenSSH GSSAPI Remote Code Execution Vulnerability

Solution:
The vendor has released updated versions of the software that address these issues.

Please see the referenced advisories for more information and fixes.


Ubuntu Ubuntu Linux 7.10 powerpc

• Ubuntu openssh-client-udeb_4.6p1-5ubuntu0.6_powerpc.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_4.6p1-5ubuntu0.6_powerpc.udeb


• Ubuntu openssh-client_4.6p1-5ubuntu0.6_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_4 .6p1-5ubuntu0.6_powerpc.deb


• Ubuntu openssh-server-udeb_4.6p1-5ubuntu0.6_powerpc.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server-u deb_4.6p1-5ubuntu0.6_powerpc.udeb


• Ubuntu openssh-server_4.6p1-5ubuntu0.6_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_4 .6p1-5ubuntu0.6_powerpc.deb


• Ubuntu ssh-askpass-gnome_4.6p1-5ubuntu0.6_powerpc.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_4.6p1-5ubuntu0.6_powerpc.deb


• Ubuntu ssh-krb5_4.6p1-5ubuntu0.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/ssh-krb5_4.6 p1-5ubuntu0.6_all.deb


• Ubuntu ssh_4.6p1-5ubuntu0.6_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.6p1-5ubunt u0.6_all.deb

Turbolinux Turbolinux 10 F...

• Turbolinux openssh-3.8p1-9.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssh-3.8p1-9.i586.rpm


• Turbolinux openssh-askpass-3.8p1-9.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssh-askpass-3.8p1-9.i586.rpm


• Turbolinux openssh-clients-3.8p1-9.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssh-clients-3.8p1-9.i586.rpm


• Turbolinux openssh-server-3.8p1-9.i586.rpm
  Turbolinux 10 Desktop, Turbolinux 10 F..., Turbolinux Home, Turbolinux Multimedia, Turbolinux Personal
  ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/u pdates/RPMS/openssh-server-3.8p1-9.i586.rpm

Ubuntu Ubuntu Linux 7.04 i386

• Ubuntu openssh-client-udeb_4.3p2-8ubuntu1.5_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_4.3p2-8ubuntu1.5_i386.udeb


• Ubuntu openssh-client_4.3p2-8ubuntu1.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_4 .3p2-8ubuntu1.5_i386.deb


• Ubuntu openssh-server-udeb_4.3p2-8ubuntu1.5_i386.udeb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server-u deb_4.3p2-8ubuntu1.5_i386.udeb


• Ubuntu openssh-server_4.3p2-8ubuntu1.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_4 .3p2-8ubuntu1.5_i386.deb


• Ubuntu ssh-askpass-gnome_4.3p2-8ubuntu1.5_i386.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_4.3p2-8ubuntu1.5_i386.deb


• Ubuntu ssh-krb5_4.3p2-8ubuntu1.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/ssh-krb5_4.3 p2-8ubuntu1.5_all.deb


• Ubuntu ssh_4.3p2-8ubuntu1.5_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.3p2-8ubunt u1.5_all.deb

Debian Linux 4.0 mips

• Debian openssh-client-udeb_4.3p2-9etch3_mips.udeb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-client- udeb_4.3p2-9etch3_mips.udeb


• Debian openssh-client_4.3p2-9etch3_mips.deb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-client_ 4.3p2-9etch3_mips.deb


• Debian openssh-server-udeb_4.3p2-9etch3_mips.udeb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-server- udeb_4.3p2-9etch3_mips.udeb


• Debian openssh-server_4.3p2-9etch3_mips.deb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-server_ 4.3p2-9etch3_mips.deb


• Debian ssh-askpass-gnome_4.3p2-9etch3_mips.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gno me_4.3p2-9etch3_mips.deb


• Debian ssh-krb5_4.3p2-9etch3_all.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh-krb5_4.3p2- 9etch3_all.deb


• Debian ssh_4.3p2-9etch3_all.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh_4.3p2-9etch 3_all.deb

Debian Linux 4.0 arm

• Debian openssh-client-udeb_4.3p2-9etch3_arm.udeb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-client- udeb_4.3p2-9etch3_arm.udeb


• Debian openssh-client_4.3p2-9etch3_arm.deb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-client_ 4.3p2-9etch3_arm.deb


• Debian openssh-server-udeb_4.3p2-9etch3_arm.udeb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-server- udeb_4.3p2-9etch3_arm.udeb


• Debian openssh-server_4.3p2-9etch3_arm.deb
  http://security.debian.org/pool/updates/main/o/openssh/openssh-server_ 4.3p2-9etch3_arm.deb


• Debian ssh-askpass-gnome_4.3p2-9etch3_arm.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gno me_4.3p2-9etch3_arm.deb


• Debian ssh-krb5_4.3p2-9etch3_all.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh-krb5_4.3p2- 9etch3_all.deb


• Debian ssh_4.3p2-9etch3_all.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh_4.3p2-9etch 3_all.deb

Debian Linux 4.0 m68k

• Debian ssh-krb5_4.3p2-9etch3_all.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh-krb5_4.3p2- 9etch3_all.deb


• Debian ssh_4.3p2-9etch3_all.deb
  http://security.debian.org/pool/updates/main/o/openssh/ssh_4.3p2-9etch 3_all.deb

Apple Mac OS X Server 10.3.9

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.3.9

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.1

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X 10.4.2

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.3

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.4

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.4.8

• Apple Mac OS X v10.4.9
  http://www.apple.com/support/downloads/

FreeBSD FreeBSD 5.0 .x

• FreeBSD openssh5x.patch
  FreeBSD 5.x
  fetch http://security.FreeBSD.org/patches/SA-06:22/openssh5x.patch