[sans+ZZ86840642882145134@sans.org: Security Alert Consensus #050]

[Darrel Lawrence]

On Fri, Dec 20, 2002 at 02:04:36PM -0800, Lan Barnes wrote:
> On Fri, Dec 20, 2002 at 12:09:33PM -0800, Neil Schneider wrote:
> > Sorry for the included ads, but there is information here that may effect
> > members of the group. Especially people using SecureShell and Putty from
> > work.
> > 
> 
> OK, I use OpenSSH on my server and laptop, and occasionally putty on my
> office WS. That's putty for access only. Am I vulnerable?

Apparently yes.  Putty doesn't have a patch out yet.  Actually,
the site doesn't mention the problem at all, best i can tell.

-Darrel

-- 
May God bless those who love us. And those who do not love us, 
may He turn their hearts. And if He does not turn their hearts, 
may He turn their ankles so we may know them by their limping. 
     - Irish Blessing.