|
|
Sponsored Content
Operating Systems
Linux
Red Hat
RHEL 3 and OpenSSH question..
Post 302630935 by 300zxmuro on Thursday 26th of April 2012 01:55:29 PM
04-26-2012
RHEL 3 and OpenSSH question..
Hey Folks,
I currently have several RHEL 3 machines. All of them are running OpenSSH_3.6.1p2, SSH protocols 1.5/2.0
I have a vulnerability issue and need to update OpenSSH to the newest version supported by RHEL 3.
The question is:
What would that version would be?
This is actually the problem:
"OpenSSH is a set of computer programs that provides encrypted communication sessions over a computer network using the ssh protocol. OpenSSH includes Pluggable Authentication Module (PAM) which depends on text configuration files for security actions to be taken for an application. A remote administrator user account guessing vulnerability is present in OpenSSH editions. If PermitRootLogin is disabled, a remote attacker can guess the administrator password through a timing attack. A successful exploitation will allow the attacker to guess the root password."
Thanks!
I currently have several RHEL 3 machines. All of them are running OpenSSH_3.6.1p2, SSH protocols 1.5/2.0
I have a vulnerability issue and need to update OpenSSH to the newest version supported by RHEL 3.
The question is:
What would that version would be?
This is actually the problem:
"OpenSSH is a set of computer programs that provides encrypted communication sessions over a computer network using the ssh protocol. OpenSSH includes Pluggable Authentication Module (PAM) which depends on text configuration files for security actions to be taken for an application. A remote administrator user account guessing vulnerability is present in OpenSSH editions. If PermitRootLogin is disabled, a remote attacker can guess the administrator password through a timing attack. A successful exploitation will allow the attacker to guess the root password."
Thanks!
Last edited by 300zxmuro; 04-26-2012 at 03:24 PM..
|
|
10 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
I have to create an automated sftp job on an AIX box. The sftp command doesnt work. Do I need to install the openssh package in order to be able to invoke the sftp command? (2 Replies)
Discussion started by: NycUnxer
2 Replies
2. UNIX for Dummies Questions & Answers
In sshd_config it is written:
# The strategy used for options in the default sshd_config shipped with
# OpenSSH is to specify options with their default value where
# possible, but leave them commented. Uncommented options change a
# default value.
So does that mean for the following:
... (2 Replies)
Discussion started by: mojoman
2 Replies
3. Red Hat
Hi RedHat Enterprise users. Does anyone know if the new RHCSA and also the RHCE exams can be taken via independent, self-study?
By this I mean not attending an offical RedHat certification course and arranging the exams myself.
Many thanks for your time. (2 Replies)
Discussion started by: patcom
2 Replies
4. Red Hat
Hi,
I heard a command that can collect all RHEL 5 log in a single compress file before I forget.
Does any body know...What the command is ?
Thanks. (4 Replies)
Discussion started by: nnnnnnine
4 Replies
5. Red Hat
Hi all,
Im studying rhcsa as of now, so yum installation and dependencies are messing me to not workit out.
i have dual os, win 7 & rhel 6.
i have tried this installation of vsftpd package with rhel 6 dvd in VM rhel 6 in win 7 as well as host rhel 6.still the same issue.
below error... (6 Replies)
Discussion started by: redhatlbug
6 Replies
6. Red Hat
make: Leaving directory `/u01/openssh-6.2p2/openbsd-compat'
gcc -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -fno-strict-aliasing
-D_FORTIFY_SOURCE=2 -fno-builtin-memset -std=gnu99 -I. -I. -DSSHDIR=\"/usr/local/etc\" -
D_PATH_SSH_PROGRAM=\"/usr/local/bin/ssh\"... (0 Replies)
Discussion started by: scao
0 Replies
7. Red Hat
There was a security analysis run on one server which has RHEL 5.8 installed and it is showing security vulnerabilities with respect to ssh in OpenSSH with reference no CVE-2007-4752. The vulnerability solution in the security report is showing solution as below:
1) Download and apply the... (3 Replies)
Discussion started by: RHCE
3 Replies
8. Red Hat
:b:Hi Linux People,
Apologies, but its yet another RHCSA/RHCE (RHEL 6) question.
I simply need to know what I will be faced with when I click 'Start Exam' for both of these certs. I have passed multiple 'multi-choice' exams in the past in Microsoft, COMPTIA, Oracle Solaris, etc, etc, etc. ... (1 Reply)
Discussion started by: patcom
1 Replies
9. Red Hat
Hello all, I am having a bit of an issue on my Spacewalk installation. Some amplifying information is that it is Spacewalk 2.3 installed on a RHEL 6 machine and I am attempting to install/update a RHEL 5 channel/repository. I am fairly new to Spacewalk so I am still learning but this is what I... (3 Replies)
Discussion started by: jstone4646
3 Replies
10. AIX
We found out that the Spectrum Scale (GPFS) doesnt support mix nodes (AIX and RHEL) on direct attached storage.
Is there any other options besides NFS for mix O/S? Trying to avoid network type of shared filesystem which might end up high traffic on IO because we do run backup jobs on those... (0 Replies)
Discussion started by: kiasu
0 Replies
LEARN ABOUT DEBIAN
mdbfontsize
mdbFontSize(5) The m17n Library mdbFontSize(5) NAME
mdbFontSize - Font Size DESCRIPTION
In some case, a font contains incorrect information about its size (typically in the case of a hacked TrueType font), which results in a bad text layout when such a font is used in combination with the other fonts. To overcome this problem, the m17n library loads information about font-size adjustment from the m17n database by the tags <font, resize>. The data is loaded as a plist of this format. FONT-SIZE-ADJUSTMENT ::= PER-FONT * PER-FONT ::= '(' FONT-SPEC ADJUST-RATIO ')' FONT-SPEC ::= '(' [ FOUNDRY FAMILY [ WEIGHT [ STYLE [ STRETCH [ ADSTYLE ]]]]] REGISTRY ')' ADJUST-RATIO ::= INTEGER FONT-SPEC is to specify properties of a font. FOUNDRY to REGISTRY are symbols corresponding to Mfoundry to Mregistry property of a font. See m17nFont for the meaning of each property. ADJUST-RATIO is an integer number specifying by percentage how much the font-size must be adjusted. For instance, this PER-FONT: ((devanagari-cdac) 150) instructs the font handler of the m17n library to open a font of 1.5 times bigger than a requested size on opening a font whose registry is 'devanagari-cdac'. COPYRIGHT
Copyright (C) 2001 Information-technology Promotion Agency (IPA) Copyright (C) 2001-2011 National Institute of Advanced Industrial Science and Technology (AIST) Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License <http://www.gnu.org/licenses/fdl.html>. Version 1.6.2 12 Jan 2011 mdbFontSize(5)