
	Where results make sense

Topic: OpenSSH

Related Topics

Secure Shell

Pluggable Authentication Modules

SSH

Ethereal

List of open source software packages

FreeBSD

Berkeley Software Distribution

Lenya

Transport layer

Intelligence in the American Revolutionary War

Application layer

United States Coast Guard

Envolution

Treaty of Nanking

Treaty of Nanjing

In the News (Mon 16 Nov 09)

Northern Trust

Marvin Harrison

Peter Chernin

Gary Locke

Match Play

Penelope Cruz

Mickey Rourke

AR Rahman

Danny Boyle

Hugh Jackman

	OpenSSH - Wikipedia, the free encyclopedia
		OpenSSH was created by the OpenBSD team as an alternative to the original SSH software by Tatu Ylönen, which is now proprietary software.
		The OpenSSH developers claim that it is more secure than the original, due to their policy of producing clean and audited code and the fact, to which the word open in the name refers, that it is released under the open source BSD license.
		OpenSSH 4.3 was released on February 1, 2006 [1].
	en.wikipedia.org /wiki/OpenSSH (889 words)

	OpenSSH
		OpenSSH is a FREE version of the SSH protocol suite of network connectivity tools that increasing numbers of people on the Internet are coming to rely on.
		The OpenSSH suite includes the ssh program which replaces rlogin and telnet, scp which replaces rcp, and sftp which replaces ftp.
		OpenSSH is primarily developed by the OpenBSD Project, and its first inclusion into an operating system was in OpenBSD 2.6.
	www.openssh.com (341 words)

	Secure Shell - Wikipedia, the free encyclopedia
		Used by some OpenSSH configurations when PAM is the underlying host authentication provider to effectively provide password authentication, sometimes leading to inability to log in with a client that supports just the plain "password" authentication method.
		OpenSSH for Windows - Cygwin package consisting of a server and client.
		It can be installed standalone, without a Cygwin environment but Cygwin and OpenSSH can not coexist as separate installations on the same machine, unless OpenSSH is installed inside the Cygwin environment.
	en.wikipedia.org /wiki/Ssh (1848 words)

	CERT Advisory CA-2002-18 OpenSSH Vulnerabilities in Challenge Response Handling
		System administrators running OpenSSH versions 3.2 or 3.3 may be able to reduce the impact of this vulnerability by enabling the "UsePrivilegeSeparation" configuration option in their sshd configuration file.
		OpenSSH is not included in any world-wide version of JUNOS, nor is it included in the Prisma G10 CMTS software release.
		The Red Hat Linux OpenSSH packages were not compiled with either BSD_AUTH or SKEY enabled, therefore in order to be vulnerable to this issue a user would need to have enabled the configuration option "PAMAuthenticationViaKbdInt" in their sshd configuration file (the default is disabled).
	www.cert.org /advisories/CA-2002-18.html (2851 words)

	OpenSSH FAQ
		The OpenSSH suite includes the ssh(1) program which replaces rlogin and telnet, and scp(1) which replaces rcp(1) and ftp(1).
		OpenSSH releases prior to 3.8 had an moduli file with moduli that were just smaller than what sshd would look for, and as a result, sshd would end up using moduli significantly larger than requested, which resulted in a speed penalty.
		OpenSSH and OpenSSL were compiled with gcc 3.3.x.
	www.openbsd.org /openssh/faq.html (4462 words)

	OpenSSH
		OpenSSH is a free, open source implementation of the SSH (Secure SHell) protocols.
		Since OpenSSH version 2.9, the default protocol in Red Hat Linux 7.2 is version 2, which uses RSA keys as the default.
		The OpenSSH set of utilities should be used whenever possible to avoid these security problems.
	www.redhat.com /docs/manuals/linux/RHL-7.2-Manual/custom-guide/openssh.html (227 words)

	Darren Tucker's OpenSSH Page
		I'm one of the OpenSSH developers, and occasionally I put up patches that are for testing or haven't been integrated yet.
		OpenSSH is a BSD-licensed SSH implementation, originally based on the last free SSH release.
		If you have been running OpenSSH on AIX for a while without this patch, some of your user accounts may have exceeded the "Weeks between password EXPIRATION and LOCKOUT" setting, and when sshd starts enforcing the password expiration rules, you may find many accounts are now locked out.
	www.zip.com.au /~dtucker/openssh (1185 words)

	OpenSSH's Cinderella story \| Tech News on ZDNet
		OpenSSH's official history details the sequence of events far more exhaustively than is necessary here.
		The initial version of OpenSSH was released in late 1999 and became a runaway success.
		Now that OpenSSH is available, we can but hope that all those telnet-centrics out there will get a clue and use it to include SSH implementations in their products.
	news.zdnet.com /2100-9595_22-522060.html (1310 words)

	Optimizing OpenSSH
		OpenSSH is a secure replacement for deprecated protocols such as telnet and rsh.
		OpenSSH offers too many options, in both the client and the server, and these options make OpenSSH complicated to use and allows bugs to creep in.
		Of course, using OpenSSH (or any SSH for that matter) can be as complex or as easy as you wish it to be.
	linsec.ca /syshardening/openssh.php (7573 words)

	OpenSSH Tutorial for Mac OS X (Site not responding. Last check: 2007-10-07)
		OpenSSH is a Secure Shell (SSH) program included with Mac OS X. SSH provides a secure connection between your local computer and a computer somewhere else (a remote server) that allows you to send commands or run programs on that server.
		From this point on, you may use the machine as though you were logged in at the console.
		Several weaknesses have been discovered in ssh1, and it is generally recommended that you run ssh2.
	itexpress.ucdavis.edu /help/tutorials/openssh.shtml (403 words)

	Vintela Resource Central - OpenSSH for VAS
		OpenSSH is an open-source implementation of the SSH protocol.
		The OpenSSH, provided here, is an adaptation of OpenSSH-portable modified to provide default single sign-on capability for Vintela customers using the Vintela Authentication Service (VAS) and/or Vintela Management eXtensions (VMX) products.
		The Vintela OpenSSH distributions are subject to open source licence conditions.
	rc.vintela.com /topics/openssh (186 words)

	Internet Security Systems -
		OpenSSH is a freely available open source Secure Shell daemon which allows encrypted communications over networks.
		OpenSSH is also relied upon to provide secure communications between network administrators and network appliances, routers, and switches.
		Given the wide distribution of OpenSSH across multiple operating systems and architectures, it is possible that this vulnerability is exploitable in at least some cases.
	xforce.iss.net /xforce/alerts/id/144 (961 words)

	The Fedora Legacy Project
		Topic: Updated openssh packages that fix a potential security vulnerability are now available.
		OpenSSH is OpenBSD's SSH (Secure SHell) protocol implementation.
		Users of openssh should upgrade to these updated packages, which contain backported patches to resolve these issues.
	www.fedoralegacy.org /updates/RH9/2005-07-11-FLSA_2005_123014__Updated_openssh_packages_fix_a_security_issue.html (504 words)

	freshmeat.net: Project details for Portable OpenSSH
		Portable OpenSSH is a Unix/Linux port of OpenBSD's excellent OpenSSH, a full implementation of the SSH1 and SSH2 protocols.
		OpenSSH uses PEM format for DSA key files which is incompatible with the SSH2 key file format.
		I can't put the public key generated with OpenSSH on the ssh2 server and I can't get OpenSSH to use a private key generated with ssh-keygen2.
	freshmeat.net /projects/openssh (349 words)

	The 101 Uses of OpenSSH: Part I \| Linux Journal
		OpenSSH built on Groenvall's work (his version, called OSSH, is still available), adding support for later versions of the ssh protocol and modularizing its cryptographic mechanisms in such a way that it's possible to compile OpenSSH without any patented algorithms whatsoever (i.e., without support for ssh v.1 protocols, which depend on RSA).
		The other innovation the OpenBSD team brought is the forking of the OpenSSH code-base into a ``clean'' version, which is kept as simple and platform-independent as possible, and a ``portable'' version, which can be compiled for a variety of versions of UNIX besides OpenBSD.
		The OpenSSH web site (see Resources) is the place to go for the latest version of OpenSSH, both in source-code and RPM forms, and also for OpenSSL, which is required by OpenSSH.
	www2.linuxjournal.com /article/4412 (3001 words)

	OpenSSH Public Key Authentication (Site not responding. Last check: 2007-10-07)
		First, confirm that OpenSSH is the SSH software installed on the client system.
		OpenSSH may also refuse to support public key authentication if the file permissions are too open.
		Assuming that all of the servers use OpenSSH instead of a different SSH implementation, the public key data must be appended into the
	cfm.gs.washington.edu /security/ssh/client-pkauth (937 words)

	NSLU2-Linux - HowTo / UseOpenSSHForRemoteAccess
		OpenSSH is a fully featured daemon which also requires the OpenSSL libraries.
		I have a Windows 2000 machine which I want to be able to use from work (behind a number of firewalls) to access the slug on my home broadband network.
		If you want to allow other users to use ssh to access the slug, you will need to create the users in the normal way using the Linksys web interface, update the /etc/passwd file to allocate them a shell and give them a path to their home directory.
	www.nslu2-linux.org /wiki/HowTo/UseOpenSSHForRemoteAccess (2042 words)

	OpenSSH
		OpenSSH is a set of network connectivity tools used to access remote machines securely.
		OpenSSH is maintained by the OpenBSD project, and is based upon SSH v1.2.12 with all the recent bug fixes and updates.
		OpenSSH has the ability to create a tunnel to encapsulate another protocol in an encrypted session.
	www.freebsd.org /doc/en_US.ISO8859-1/books/handbook/openssh.html (1142 words)

	ISS X-Force Database: openssh-packet-bo(13191): OpenSSH large packet buffer overflow (Site not responding. Last check: 2007-10-07)
		OpenSSH is a free open-source version of the SSH (Secure Shell) protocol, which is a client-server program for authentication and encryption of network communications.
		OpenSSH versions prior to 3.7 are vulnerable to a buffer overflow.
		CVE-2003-0693: A buffer management error in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CAN-2003-0695.
	xforce.iss.net /xforce/xfdb/13191 (1183 words)

	Internet Security Systems -
		OpenSSH employs end-to-end encryption (including all passwords) and is resistant to network monitoring, eavesdropping, and connection hijacking attacks.
		Note: OpenSSH is included in many operating system distributions, networking equipment, and security appliances.
		At least one of these options must be enabled before the OpenSSH binaries are compiled for the vulnerable condition to be present.
	bvlive01.iss.net /issEn/delivery/xforce/alertdetail.jsp?oid=20584 (852 words)

	RedHat: Moderate: openssh security update - The Community's Center for Security
		Updated openssh packages that fix a security issue, bugs, and add support for recording login user IDs for audit are now available for Red Hat Enterprise Linux 4.
		Summary: Updated openssh packages that fix a security issue, bugs, and add support for recording login user IDs for audit are now available for Red Hat Enterprise Linux 4.
		On OpenSSH installations which have GSSAPI enabled, this flaw could allow a user who sucessfully authenticates using a method other than GSSAPI to be delegated with GSSAPI credentials.
	www.linuxsecurity.com /content/view/120532 (603 words)

	Howto : configure openssh with the chroot patch (Site not responding. Last check: 2007-10-07)
		This document was born out of the need for me to upload/download files to a linux box, and to trigger file syncronization of the changes to a backup box by means of rsync through ssh.
		I was using that some time ago, but this was in the times of openssh 2.9.
		Generally, you will need a source distribution of openssh, which is at this time is at version 3.5p1.
	mail.incredimail.com /howto/openssh (818 words)

	Installing OpenSSH Packages (Site not responding. Last check: 2007-10-07)
		The installation of openssh on SPARC or Intel machines running various levels of the Solaris OE is different from platform to platform.
		These pages also discuss the installation of openssl which is used by openssh and other packages and how to generate the entropy for openssl.
		OpenSSH 4.3p2 for SPARC or Intel Solaris 9 and 10
	www.sunfreeware.com /openssh.html (184 words)

	CERT Advisory CA-2003-24 Buffer Management Vulnerability in OpenSSH
		We are updating this advisory to inform users that Version 3.7.1 of OpenSSH has been released to patch a similar vulnerability in the buffer management code.
		System administrators running OpenSSH versions 3.2 or higher may be able to reduce the impact of this vulnerability by enabling the "UsePrivilegeSeparation" configuration option in their sshd configuration file.
		As of 2003/09/17, we have included the fixes from OpenSSH 3.7.1 as well as 4 additional fixes to other such real or potential errors based on an exhaustive review of the OpenSSH source code for uses of *realloc() functions.
	www.cert.org /advisories/CA-2003-24.html (1672 words)

	NetWare 6.5
		OpenSSH is an open source technology that has been integrated with NetWare®.
		In NetWare 6.5, Novell has integrated OpenSSH version 3.6p1 (http://www.openssh.com) to work on NetWare so that administrators and users can access NetWare servers in their networks using methods that provide secure access and transmission of data.
		OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other network-level attacks.
	aitc.cba.ua.edu /welcome/ssh.html (239 words)

	OpenSSH hits the fan \| The Register
		This mechanism, part of the SSH2 protocol, verifies a user's identity by generating a challenge and forcing the user to supply a number of responses.
		However this mechanism is flawed in OpenSSH version 3.3 - it's possible for a remote attacker to send a specially-crafted reply that triggers an overflow.
		OpenSSH is a free version of the SSH (Secure Shell) communications suite and is used as a secure replacement for protocols such as Telnet, Rlogin, Rsh, and Ftp.
	www.theregister.co.uk /2002/06/26/openssh_hits_the_fan (336 words)

Try your search on: Qwika (all wikis)