Bugtraq: Re: Bug in ssh client (open ssh 2.3.0)

[Ben Greenbaum <bgreenbaum () SECURITYFOCUS COM>]

Nobody else yet has confirmed this:

------------------------------------------
From: "Jeffrey W. Baker" <jwbaker () acm org>

Curious.  It doesn't do that here on Slackware-current (Linux 2.4.1, glibc
2.2.1, gcc 2.95.2):

jwb () manchurian-candidate:~$ ssh jwb () heat
jwb () heat's password:
Permission denied, please try again.
jwb () heat's password:
Permission denied, please try again.
jwb () heat's password:
Permission denied.
jwb () manchurian-candidate:~$ ssh -l jwb heat
jwb () heat's password:
Permission denied, please try again.
jwb () heat's password:
Permission denied, please try again.
jwb () heat's password:
Permission denied.
jwb () manchurian-candidate:~$ ssh -V
SSH Version OpenSSH_2.3.0p1, protocol versions 1.5/2.0.
Compiled with SSL (0x0090581f).

--------------------------------------------
From: neonatus () neonatus net (Bostjan Muller)

This does not happen on my machine - debian 2.2 & SSH Version OpenSSH_2.3.0p1,
protocol versions 1.5/2.0. Compiled with SSL (0x0090581f). Kernel 2.4.1 or
kernel 2.2.18 or kernel 2.2.16 I tested it on 4 machines, not one of them
segfaultet.

----------------------------------------------------------
From: =?iso-8859-1?Q?M=E5ns_Nilsson?= <mansaxel () nic-se se>

What OS? I have it on several BSDen and Solaris. Works just nice.

----------------------
From: bluehell () gmx net

NOT confirmed, however i use rh7's openssh-clients package:

[kerouac:mg:~]ssh mgerber () noc
ssh: noc: Name or service not known
[kerouac:mg:~]ssh mgerber () noc
mgerber () noc's password:
Permission denied, please try again.
mgerber () noc's password:
Permission denied, please try again.
mgerber () noc's password:
[kerouac:mg:~]which ssh
/usr/bin/ssh
[kerouac:mg:~]ls -la /usr/bin/ssh
-rwsr-xr-x    1 root     root       176932 Nov 21 23:53 /usr/bin/ssh
[kerouac:mg:~]ssh -V
SSH Version OpenSSH_2.3.0p1, protocol versions 1.5/2.0.
Compiled with SSL (0x0090581f).
[kerouac:mg:~]rpm -qf /usr/bin/ssh
openssh-clients-2.3.0p1-4


Ben Greenbaum
Director of Site Content
SecurityFocus
http://www.securityfocus.com