Redhat secure server - Oct 2001 - ssh - middle men in attack

Dear All...

i have some complication with ssh, i''m using ssh to connect to another
server this is the error that i get

"It is possible that someone doing something NASTY, someone could be
eavesdropping on you right now (MAN-IN-THE-MIDDLE ATTACKE)! it is also possible
that the DSA host key has just been changed, the fingerprint for DSA Key sent by
the remote host is ...
add correct host key in /root/.ssh/known_host2
offending key in /root/.ssh/known_hosts2:3
DSA host key is change."

what should i do now?

thank you,
-taufik-

1)      Shutdown the server.
2)      Remove all SSH Keys.
3)      Check CERT for any vulnerabilities.
4)      Upgrade SSH.
 
Matt Gavin

On Tue, Oct 23, 2001 at 01:09:19PM +0800, taufik
<taufik@commercedc.com.my> wrote:
| i have some complication with ssh, i''m using ssh to connect to
another server this is the error that i get
| 
| "It is possible that someone doing something NASTY, someone could be
eavesdropping on you right now (MAN-IN-THE-MIDDLE ATTACKE)! it is also possible
that the DSA host key has just been changed, the fingerprint for DSA Key sent by
the remote host is ...
| add correct host key in /root/.ssh/known_host2
| offending key in /root/.ssh/known_hosts2:3
| DSA host key is change."

This means that the remote host has a different host key from the one
ssh saw last time you connected to it. This is your defense against a
man-in-the-middle attack. However, it is also a frequent side effect of
the remote host having been reinstalled.

1: Check that there is a real, plausible reason that the remote host would
   have a new host key.
2: Provided you''re _sure_ you''re not being spoofed, remove
your copy of
   that key from your known_hosts2 file, and connect again.
-- 
Cameron Simpson, DoD#743        cs@zip.com.au    http://www.zip.com.au/~cs/

I was driving in downtown Miami, which in itself shows very poor judgement
because most Miami motorists graduated with honors from the Moammar Gadhafi
School of Third World-Style Driving (Motto "Death Before Yielding").
	- Dave Barry