similar to: segfault in openssh-1.2pre13

Hi, I would like to report a bug in OpenSSH-1.2.2 (release) under Linux. Under certain conditions the sshd client process segfaults while doing the password authentification. I have observed the behaviour with glibc 2.0.7 (non-PAM), glibc 2.1.1 (PAM) and glibc 2.1.2 (PAM), when 'RhostsRSAAuthentication yes' is chosen in sshd_config. It appears to happen regardless whether PAM is used or

Hi! There is a situation when sshd will crash, but it might be rather hard to reproduce. I'll try to explain the setup :) S/KEY is compiled and installed (taken from http://www.sparc.spb.su/solaris/skey/ ) on Linux box (kernel 2.4.0). Then, OpenSSH 2.3.0p1 is compiled with skey support. It all works fine (patch has been applied too, which fixes skey issue found in November). Now, for the

----- Forwarded message from Telford Tendys <telford@triode.net.au> ----- Delivery-Date: Thu Jan 25 22:22:57 2001 Date: Fri, 26 Jan 2001 16:26:27 +1100 From: Telford Tendys <telford@triode.net.au> To: feedback@vorbis.com Subject: Comments on your code User-Agent: Mutt/1.2.5i Dear Vorbis, I didn't even know about ogg or vorbis until I was at a conference and someone said, ``if

Solaris 7 doesn't have a ut_host element in utmp...patch let's bsd-login.c compile with this knowledge: *** openssh-1.2pre13.orig/bsd-login.c Fri Nov 19 00:32:34 1999 --- openssh-1.2pre13/bsd-login.c Fri Nov 19 14:23:49 1999 *************** *** 40,45 **** --- 40,46 ---- static char *rcsid = "$Id: bsd-login.c,v 1.1 1999/11/19 04:32:34 damien Exp $"; #endif /*

The attached patch contains fixes for: 1. the fact that solaris 7 has no u_int32_t/u_int16_t defined, but they do define uint32_t/uint16_t...this chances the define in config.h.in, which doesn't work, to a properly configure test, and define in config.h.in 2. fixes a bug in config.h.in where paths.h is included, yet HAVE_PATHS_H is undefined 3. fixes a bug in bsd-daemon.c where

Hi, It's been uploaded to non-us.debian.org, but if you're in a hurry, you can grab it here: http://www.hands.com/~phil/debian/openssh/ Things from the debian patch that might be worth taking upstream: configure.in: . The tcp-wrappers patch (mentioned here recently) Makefile: . Put OPT_FLAGS back in so I can set options in debian/rules . Install ssh with SUID bit set

Can't compile sshd.c because of pam errors. The errors are attached below, and I apologize for the >75 chars a line. RH4.2, with the latest updates, runs pam-0.57-5. I could upgrade PAM from source, but I'd probably break other programs. gcc -g -O2 -Wall -I/usr/local/ssl/include -DETCDIR=\"/etc/ssh\" -DSSH_PROGRAM=\"/usr/bin/ssh\"

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have just uploaded 1.2pre13 to http://violet.ibs.com.au/openssh/ Imporant changes: - - Fixes a single-byte buffer overrun in the PAM code. - - Quite a bit more Solaris support. EGD should work now (please test). - - Lots more autoconf options to enable Kerberos, AFS, TCP Wrappers and S/Key (all untested). - - MD5 passwords for Slackware Linux

When testing with max_extents=4k, we enospc out really really early. The reason for this is we really overwhelm the system with our worst case calculation. When we try to flush delalloc, we don''t want everybody to wait around forever, so we wake up the waiters when we''ve done some of the work in hopes that its enough work to get everything they need done. The problem with this

Hi, I found what seems to be a bug in smbd (and smbclient?) from samba-2.2.8a-1. Scenario is the following: All users have accounts in linux box "mate", with homes mounted via NFS from linux box "fserver". mate and fserver run samba-2.2.8a-1, mate ONLY validates passwords and has no shares; fserver in turn, ONLY shares [homes] and [netlogon], but has no users, so samba uses

I have had * installed for a couple of weeks now and am very impressed. I have got Zap, SIP and MGCP working and can call freely between them with just things like transfer still to sort out etc. I then though I would add H.323 support to my working system, having read the previous threads on the subject before I installed I installed the pre-reqs pwlib openh323 gnugk for h.323 gatekeeper

It appears that openssh has inherited the dos attack that ssh is susceptible to. This has been discussed on Bugtraq (see http://securityportal.com/list-archive/bugtraq/1999/Sep/0124.html for the thread). There does not appear to be an official for ssh. Attached below is a simple, proof of concept, patch that adds a MaxConnections to sshd_config that sets the maximum number of simultaneous

Just tried out ssh in pre13, and still get the EGD problem? :( new-relay:/usr/slocal/src/openssh-1.2pre13> ./ssh -l marc atelier The authenticity of host 'atelier.acadiau.ca' can't be established. Key fingerprint is 1024 ef:36:b5:f8:a3:bb:14:4d:a9:4b:f2:90:9a:bd:bb:00. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added

Regarding /tmp/random: Someone has made the same quick&dirty fix as my AIX compile fix, for a lack of /dev/urandom. ssh expects some random bytes to be available in that file. I, or someone else should probably create a more portable way of generating entropy. ;) //Tor-?ke >From: Niels Provos <provos at outguess.org> >To: openssh-unix-dev at mindrot.org >Subject: Fwd: Re:

Okay, everything as the first large one I sent today, with a few extra mods. _PATH_MAILDIR is only used in sshd.c, that I can see, so moved the #ifdef from config.h.in to there. several files had __progname defined in the middle of the code, as well as at the top of the code, so cleaned those out. all the fixes for u_int32_t -> uint32_t and u_int16_t -> uint16_t, plus added appropriate