Bugtraq: Re: Bug in ssh client (open ssh 2.3.0)

[rafal wiosna <rafamiga () UUCP POLBOX PL>]

* Tomasz Kuźniar wrote:
> Ssh client is suid, so it could be real problem. Must check source...
        SUID is only needed when using rhosts or rshost-rsa authentication.
Many installations don't need it. Just set this option [taken from man ssh]:

     UsePrivilegedPort
             Specifies whether to use a privileged port for outgoing connec-
             tions.  The argument must be `yes'' or `no''. The default is
             `yes''. Note that setting this option to `no'' turns off
             RhostsAuthentication and RhostsRSAAuthentication.

--
__________________________________________________________________________
rafal wiosna * Polbox On-Line Service * Fidonet 2:480/33 * In ARP we trust
Powered by /usr/local/bin/joe B.O.F.P (alias|free).polbox.pl admin * AR155
RAFD-RIPE * PGP nyckeln finns tillgänglig pĺ www.se.pgp.net (ID: 3CDCB7A9)