sshd security fix
"Todd C. Miller" <[email protected]>
| Newsgroups | gmane.os.openbsd.security.announce |
|---|---|
| Message-ID | <[email protected]> |
A local user can gain super-user privileges due to a buffer overflow
in sshd(8) if AFS has been configured on the system or if
KerberosTgtPassing or AFSTokenPassing has been enabled in the
sshd_config file. Ticket and token passing is not enabled by
default.
Patch for 3.0:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.0/common/019_sshafs.patch
Patch for 3.1:
ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.1/common/001_sshafs.patch
The patches already exist in the 3.0 and 3.1 patch branches.