OpenSSH Patches Second Specialised Flaw
News The open-source project for secure communications technology, known as OpenSSH, plugged a second security hole on Tuesday that affects only users who have turned off a critical security feature. The project started using open-source versions of the...
[September 24, 2003, 15:25]
Vulnerable OpenSSH
News Many Linux/UNIX administrators prefer to rely on OpenSSH for secure shell remote login rather than using the ubiquitous (but insecure) Telnet. However, a minor flame war broke out recently when the lead developer for OpenSSH, Theo de Raadt, posted...
[July 9, 2002, 9:42]
Making The Most Of OpenSSH
White Papers Mandrake Linux has included OpenSSH as part of the base product since version 7.2, and available as part of the "crypto" suite since version 7.0. Using OpenSSH instead is a much better idea. This paper covers how to use OpenSSH, from generating SSH...
[April 27, 2004, 0:05]
Securing Communications With OpenSSH On IBM I5/OS
White Papers The OpenSSH open source product is widely used to securely access command line shells remotely. On the IBM System i platform, OpenSSH is shipped as part of the license program option IBM Portable Utilities for i5/OS and is available for systems...
[February 22, 2007, 0:00]
7 Things Every System Administrator Should Know About OpenSSH
White Papers OpenSSH provides a powerful and flexible tool for system administrators, but like any powerful tool, without a proper understanding, its potential may be wasted or, worse, it may become a liability. This white paper provides a brief introduction to...
[July 31, 2008, 13:55]
Building And Deploying OpenSSH For The Solaris Operating Environment
White Papers This document describes the build and deployment processes for OpenSSH on Solaris Operating Environment. Several components must be built prior to building OpenSSH itself. OpenSSH itself is a flexible tool with several options that affect...
[April 24, 2004, 0:05]
Configuring OpenSSH For The Solaris Operating Environment
White Papers Secure network tools such as OpenSSH counter the threats of password theft, session hijacking, and other network attacks. The network environment was never safe. As more users connect to open networks for remote access, the risks of compromising...
[April 24, 2004, 0:05]
Researcher Discovers OpenSSH Flaw
News An advisory issued on Wednesday by vendor Internet Security Systems (ISS) warns that versions OpenBSD 3.0, OpenBSD 3.1, FreeBSD-Current, and OpenSSH 3.0-3.2.3 are affected by the vulnerability. According to ISS, Open Secure Shell (OpenSSH) is...
[June 27, 2002, 9:24]
Building OpenSSH - Tools And Tradeoffs, Updated For OpenSSH 3.7.1p2
White Papers OpenSSH is a free, BSD style license, implementation of the Secure Shell protocols. OpenSSH is designed for strong authentication, for improved privacy, for secure X11 sessions, and not to trust the network.
[May 5, 2004, 1:03]
Intrusion Detection Team Denies Trojan Claim
Talkback "Trojans have been found in several open-source projects over the last year, including those found in Sendmail and OpenSSH. Vulnerabilities* were found in Sendmail, OpenSSH, and other open-source projects- *not* Trojans.
[September 22, 2003, 18:18]
OpenBSD Founder Makes Funding Plea
News This is starting to seriously impede the development of OpenBSD and OpenSSH. OpenSSH, a secure network connectivity tool project that is developed by the OpenBSD project, has received no funding from vendors, despite the fact that the tool is used...
[March 23, 2006, 10:10]
Researcher Slams Open-source Compulsion
Talkback The most important IT watchdog, Carnegie Mellon University's CERT Coordination Center, has identified security vulnerabilities in two popular open source programs, Sendmail, an e-mail program, and OpenSSH, a software tool used by network managers...
[September 24, 2003, 10:52]
OpenBSD 3.9 Released
News But he said in an interview on Tuesday that Linux and Unix vendors have been reluctant to help, despite using software developed by the project such as the OpenSSH communications encryption program. But while vendors have kept away, the project has...
[May 3, 2006, 11:20]
SSH Glitch Gives 'skeleton Key' To Networks
News He says that all versions of OpenSSH running on all distributions of Linux and BSD are affected, excluding those that have patched very recently to version 3.7.1. The OpenSSH patch and advisory has been updated.
[September 18, 2003, 11:10]
OpenBSD 3.6 Tackles SMP
News OpenBSD developers are also responsible for developing OpenSSH, a secure network connectivity tool which is used by many operating systems including IBM AIX, Linux, Mac OS X 10 and Solaris 9, to encrypt Internet traffic.
[October 29, 2004, 12:24]
Open-source Clan Clashes With Sun
News As an illustration of how deeply open-source software has penetrated the traditional computing realm, Sun adopted a version of the OpenSSH product in its own systems. OpenBSD programmers also develop OpenSSH, widely used software that controls Unix...
[December 4, 2002, 13:44]
Open Source Of Contention - SSH!
News The largest open source project -- and Enemy Number One for SSH Communications in the trademark battle -- is OpenSSH, an effort to create a free open source version of the product. The first time we heard about this issue was the beginning of...
[February 26, 2001, 14:22]
Watch For Top Linux/Unix Threats
News Applicability -- Any system running OpenSSH 3.3 or earlier, or SSH 3.0.0 or earlier is affected. SSH is used to replace Telnet, FTP, and R-commands and is considerably more secure than those programs, but both OpenSSH and the SSH Communication...
[October 22, 2002, 8:29]
Google's Adventures In Open Source
News We use a lot of OpenSSL and OpenSSH. OpenBSD and OpenSSH — we do have a lot of people who work on those. Search giant Google is a heavy user of open-source software and an active participant in many projects that develop it — even chipping in some...
[December 14, 2006, 7:45]
Intrusion Detection Team Denies Trojan Claim
Talkback Here's a reference to the 'trojaning' of OpenSSH: http://www.theregister.co.uk/2002/08/01/openssh_trojaned/
[November 29, 2004, 17:11]

