Vulnerability to CRC32 compensation attack detector exploit

★ wanayoo — archive 1999 http://linuxsecurity.com/articles/network_security_article-4105.html

Nouvelle recherche | Portail wanayoo

	Documentation

	Security Sources

	Forums

	Firewalls

	Host Security

	Cryptography

	Network Security

	Intrusion Detection

	Organizations/Events

	Server Security

	Vendors/Products

	Projects

	General

	Privacy

	Government

	Hacks/Cracks

News: Network Security 12/4/2001 9:14

Vulnerability to CRC32 compensation attack detector exploit

Niels Provos
Posted By: Dave Wreski
12/4/2001 9:14

In February 2001, Razor Bindview released their "Remote vulnerability in SSH daemon crc32 compensation attack detector" advisory, which outlined a gaping hole in deployed SSH servers that can lead to a remote attacker gaining privileged access. At this writing, over 30% of all SSH servers appear to have the CRC32 bug.

Click here to go to this article.

Secure Wi-Fi standard in 12 months
May 5

Stupidity trumps security
May 5

Bugwatch: Watch Where You're Snooping
May 5

Cybersecurity Czar's Actions Would Speak Louder Than Policy
May 5

New Initiatives to Fight Cybercrime
May 5

Top 75 Security Tools
May 5

Want to Stop Spammers? Charge 'em
May 5