Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)

To: openpkg@xxxxxxxxxxx
Subject: Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)
From: Damien Miller <djm@xxxxxxxxxxx>
Date: 26 Sep 2003 00:55:59 +1000
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <20030924112808.GA94089@xxxxxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
Organization:
References: <20030924112808.GA94089@xxxxxxxxxxxxxxxxxxx>

>   vulnerable. OpenPKG installations are only affected if the package was
>   built with option "with_pam" set to "yes" -- which is not the default.

Incorrect. You mean "--with-pam" in ./configure (not default) or "UsePam
yes" (default, before 3.7.1p2) in sshd_config.

Neither of these options is called "use_pam".

-d

Follow-Ups:
- Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)
  - From: Ralf S. Engelschall

References:
- [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)
  - From: OpenPKG

Prev by Date: Re: Does VeriSign's SiteFinder service violate the ECPA?
Next by Date: Re: base64
Previous by thread: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)
Next by thread: Re: [OpenPKG-SA-2003.042] OpenPKG Security Advisory (openssh)
Index(es):
- Date
- Thread