bugzilla-daemon at bugzilla.mindrot.org
2009-Oct-21 07:10 UTC
[Bug 1662] New: Avoidable man-in-the-middle attack warnings
bugzilla.mindrot.org/show_bug.cgi?id=1662 Summary: Avoidable man-in-the-middle attack warnings Product: Portable OpenSSH Version: 4.3p2 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: unassigned-bugs at mindrot.org ReportedBy: t-om at nic.fi Created an attachment (id=1702) --> (bugzilla.mindrot.org/attachment.cgi?id=1702) Sample session capture (names changed) When running one or more virtual machines within one host machine, each virtual machine listening for ssh connections in different tcp ports of the host machine, and one tries to connect with ssh to these virtual machines or the host running them (other target than whose identification information was previously saved to known_hosts in source), ssh complains about possible man-in-the-middle attack (WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!). This could possibly be avoided if the port number was included in the identification information of a host in known_hosts. -- Configure bugmail: bugzilla.mindrot.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2009-Oct-21 10:24 UTC
[Bug 1662] Avoidable man-in-the-middle attack warnings
bugzilla.mindrot.org/show_bug.cgi?id=1662 Darren Tucker <dtucker at zip.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dtucker at zip.com.au Status|NEW |RESOLVED Resolution| |DUPLICATE --- Comment #1 from Darren Tucker <dtucker at zip.com.au> 2009-10-21 21:24:29 EST --- This was added in version 4.4 which was released ~3 years ago. *** This bug has been marked as a duplicate of bug 910 *** -- Configure bugmail: bugzilla.mindrot.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug. You are watching someone on the CC list of the bug.
bugzilla-daemon at bugzilla.mindrot.org
2010-Apr-16 05:50 UTC
[Bug 1662] Avoidable man-in-the-middle attack warnings
bugzilla.mindrot.org/show_bug.cgi?id=1662 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #2 from Damien Miller <djm at mindrot.org> 2010-04-16 15:50:07 EST --- Mass move of bugs RESOLVED->CLOSED following the release of openssh-5.5p1 -- Configure bugmail: bugzilla.mindrot.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching the assignee of the bug. You are watching someone on the CC list of the bug.