• info
• discussion
• exploit
• solution
• references

OpenSSH-portable PAM Authentication Remote Information Disclosure Vulnerability

Solution:
Please see the references for more information and fixes.


OpenSSH OpenSSH 3.4 p1

• Ubuntu openssh-client-udeb_3.8.1p1-11ubuntu3.1_amd64.udeb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_3.8.1p1-11ubuntu3.1_amd64.udeb


• Ubuntu openssh-client-udeb_3.8.1p1-11ubuntu3.1_i386.udeb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_3.8.1p1-11ubuntu3.1_i386.udeb


• Ubuntu openssh-client-udeb_3.8.1p1-11ubuntu3.1_powerpc.udeb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_3.8.1p1-11ubuntu3.1_powerpc.udeb


• Ubuntu openssh-client_3.8.1p1-11ubuntu3.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_3 .8.1p1-11ubuntu3.1_amd64.deb


• Ubuntu openssh-client_3.8.1p1-11ubuntu3.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_3 .8.1p1-11ubuntu3.1_i386.deb


• Ubuntu openssh-client_3.8.1p1-11ubuntu3.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_3 .8.1p1-11ubuntu3.1_powerpc.deb


• Ubuntu openssh-server-udeb_3.8.1p1-11ubuntu3.1_amd64.udeb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/openssh-serv er-udeb_3.8.1p1-11ubuntu3.1_amd64.udeb


• Ubuntu openssh-server-udeb_3.8.1p1-11ubuntu3.1_i386.udeb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/openssh-serv er-udeb_3.8.1p1-11ubuntu3.1_i386.udeb


• Ubuntu openssh-server-udeb_3.8.1p1-11ubuntu3.1_powerpc.udeb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/openssh-serv er-udeb_3.8.1p1-11ubuntu3.1_powerpc.udeb


• Ubuntu openssh-server_3.8.1p1-11ubuntu3.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_3 .8.1p1-11ubuntu3.1_amd64.deb


• Ubuntu openssh-server_3.8.1p1-11ubuntu3.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_3 .8.1p1-11ubuntu3.1_i386.deb


• Ubuntu openssh-server_3.8.1p1-11ubuntu3.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_3 .8.1p1-11ubuntu3.1_powerpc.deb


• Ubuntu ssh-askpass-gnome_3.8.1p1-11ubuntu3.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_3.8.1p1-11ubuntu3.1_amd64.deb


• Ubuntu ssh-askpass-gnome_3.8.1p1-11ubuntu3.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_3.8.1p1-11ubuntu3.1_i386.deb


• Ubuntu ssh-askpass-gnome_3.8.1p1-11ubuntu3.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_3.8.1p1-11ubuntu3.1_powerpc.deb


• Ubuntu ssh_3.8.1p1-11ubuntu3.1_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_3.8.1p1-11ub untu3.1_all.deb