OpenSSH Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability

Threat level definition

OpenSSH Kerberos 4 TGT/AFS Token Buffer Overflow Vulnerability

Solution:
Official patches have been made available:

OpenSSH OpenSSH 2.9

OpenSSH 024_sshafs.patch
Official source code fix for OpenSSH 2.9.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/024_sshafs.patch

OpenSSH OpenSSH 2.9 p1

OpenSSH 024_sshafs.patch
Official source code fix for OpenSSH 2.9.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/024_sshafs.patch

OpenSSH OpenSSH 2.9 p2

OpenSSH 024_sshafs.patch
Official source code fix for OpenSSH 2.9.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/024_sshafs.patch

OpenSSH OpenSSH 2.9.9

OpenSSH 024_sshafs.patch
Official source code fix for OpenSSH 2.9.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/2.9/common/024_sshafs.patch

OpenSSH OpenSSH 3.0

OpenSSH 019_sshafs.patch
Official source code fix for OpenSSH 3.0.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/019_sshafs.patch

OpenSSH OpenSSH 3.0.1

OpenSSH 019_sshafs.patch
Official source code fix for OpenSSH 3.0.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/019_sshafs.patch

OpenSSH OpenSSH 3.0.2

OpenSSH 019_sshafs.patch
Official source code fix for OpenSSH 3.0.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/019_sshafs.patch

OpenSSH OpenSSH 3.1

OpenSSH 001_sshafs.patch
Official source code fix for OpenSSH 3.2.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/001_sshafs.patch

OpenSSH openssh-3.1-adv.token.patch
Official source code fix for OpenSSH 3.1 non-portable.
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.1-adv.token.patch

OpenSSH openssh-3.1p1-adv.token.patch
Official source code fix for OpenSSH 3.1 portable.
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.1p1-adv.t oken.patch

OpenSSH OpenSSH 3.2

OpenSSH 001_sshafs.patch
Official source code fix for OpenSSH 3.2.
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/001_sshafs.patch

Privacy Statement
Copyright 2009, SecurityFocus