[kj] (OT) SSH Hacked - Mac users take notice !

Jester gathering@misera.net
Tue, 16 Sep 2003 11:36:04 -0500


On 9/16/03 10:52 AM, "Phillipps Marc" <Marc.Phillipps@enfield.nhs.uk> wrote=
:

> SSH has an open vulnerability, and it is being exploited.
>=20
> If you are running Linux, Unix and Mac OS/X  shutdown your SSH port until
> you apply patches. This one is especially untimely as the main scriptkidd=
ie
> hacking tools now gives them the version numbers of what software is runn=
ing
> which port, so they can see if you're unpatched.
>=20
>=20
> SSH hole:
> http://slashdot.org/article.pl?sid=3D03/09/16/1327248&mode=3Dthread&tid=3D126&t=
id=3D
> 172
>=20
> NMAP with version numbers:
> http://slashdot.org/article.pl?sid=3D03/09/16/133228&mode=3Dthread&tid=3D126&ti=
d=3D1
> 72
>=20
> Marc
> With a strange warm windows user glow :o)


Shouldn=B9t the SSH port be shut down, walled off, and blocked unless you are
doing something that requires it? Don't think it is something that affects
the regular user to a high degree. Unlike the critical Sept 10, 2003,
"MS03-039" security issue, which can "allow an attacker to remotely
compromise a computer running Microsoft Windows and gain complete control
over it". :-P

Security updates and fixes can be set to automatically run in OS X, so, if
you set things the right way, you wont have too much of an issue.

Sooo...Mac's are still cooler than windoze. =3D->


Keeping the Fire Alive with HONOUR!
Occisio Locatio=20

The Web Master,=20
Jester=20
www.killing-joke.com
www.parallax1.com=20