Full Disclosure mailing list archives

Re: Updates for SSH Tectia plaintext recovery vulnerability released


From: adrian.lamo () hushmail com
Date: Tue, 18 Nov 2008 11:01:16 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear Juha,

Is there a reason that you and your security team decided not to
cover these breaking bits of important information security news in
your blog?  What merits security news being reposted to this list,
vs the quality of security news that earns column in your e-zine?
I used to depend on your website as my single source of relevant
information security news, knowing you and your co-conspirators
would blab about anything I need to know but now I am developing
some serious doubts as to your dedication to this community and the
integrity of your services.

Can you please clarify?

- -al

On Tue, 18 Nov 2008 10:10:42 -0500 Juha-Matti Laurio <juha-
matti.laurio () netti fi> wrote:
There is no any blog entry and there is no entry related to Skype
issue mentioned in Heise.de's article.

Juha-Matti

adrian.lamo () hushmail com kirjoitti:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dearest Juha,

I am unable to find a blog entry on your website regarding this
advisory.  Please advise.

- -al

On Tue, 18 Nov 2008 08:19:43 -0500 Juha-Matti Laurio <juha-
matti.laurio () netti fi> wrote:
It appears that a patch for SSH Tectia plaintext recovery
vulnerability
(reference:
http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt )
has been released:

November 14, 2008 - Plaintext Recovery Attack Against SSH
http://www.ssh.com/company/news/article/953/

Juha-Matti

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at
https://www.hushtools.com/verify
Version: Hush 3.0


wpwEAQMCAAYFAkki0GEACgkQ8J2EGU1ixm6f8gP/ZxUMDhIBaRUAYmOeeizCJ+X3qE8
f

Mg9ZLIpeJ6NZZA+xTHD8B2jPVBcqtW+HxTLT03iMPlDfe/gdksuYecvG62knaJlfN1z
Y

1LtVHOVSaM33cl0iaphSxBoFU3LQKMQmXgI8XTKC77wE4R/2Ot9X7Vs1Qm34UzobOem
Y
YZLSNTI=
=XGK3
-----END PGP SIGNATURE-----

--
Click to become a master chef, own a restaurant and make
millions.

http://tagline.hushmail.com/fc/PnY6qxtWo9aUb1Xu6VCEqDwRQOoLIOegC7ys
vWZZe4VfYt163sJZY/
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Version: Hush 3.0
Note: This signature can be verified at https://www.hushtools.com/verify

wpwEAQMCAAYFAkki5swACgkQ8J2EGU1ixm4OuwP/eYQFI38H/zqAB9S8xaLSzNtaj5RP
LRIWLtFoUzRbDG5Ji65eQrwaRdNDS/R32iyskABJFzi7JjgPQnZ4cwmxNgg31IY+meIt
U9x4iIeE++D4veHQi7UcsvpAWVHjKrB2jcKzohcgZgnOCe6taX9EX2A9IIfjPXlI0P2e
oHWycVg=
=cE56
-----END PGP SIGNATURE-----

--
How clean is your air? Click here for high quality air purifiers.
http://tagline.hushmail.com/fc/PnY6qxtybN5y5elV9bN6zdMSmi5gZ57FFSv4iiEZUooi7sg5opoda/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: