Bug-damn-bug! Update your ssh key A.S.A.P.

Debian's patch to openssl is having bug for 2 years? Oh my..

http://metasploit.com/users/hdm/tools/debian-openssl/
http://daviey.mooo.com/blogroll/weak-ssh-key.html
http://dev.osso.nl/herman/blog/2008/05/14/weak-ssl-key-vulnerabilities-not-so-funny/

(Drumroll please...)
And the e x p l o i t:
http://milw0rm.com/exploits/5622

Syndicate content