Re: 011: SECURITY FIX: February 12, 2006

I'd like to get some additional information about this patch that was 
issued for OpenBSD 3.7.  Specifically can this exploit be remotely 
exploited or is it something that's local to the machine? 


Darren Tucker wrote:
> On Wed, Feb 15, 2006 at 08:58:31PM -0500, Wayne Facer wrote:
>   
>> Would it be possible to get a hold of the author who issued this patch? 
>> I'd like to get some additional information before I deploy it on my 
>> OpenBSD 3.7 servers.
>>     
>
> I'm not the author of the patch but I am one of the OpenSSH developers.
> Ask away.

[demime 1.01d removed an attachment of type APPLICATION/DEFANGED which had a name of wfacer.21245DEFANGED-vcf]