06-24-2008, 09:58
|
|
|
Debian and OpenSSH
I advice all hosting provider that use openssh on debian (ssl)
http://packages.qa.debian.org/o/openssl.html to be carefull.
Luciano Bello discovered that the random number generator in Debian's openssl package is predictable. This is caused by an incorrect Debian-specific change to the openssl package (CVE-2008-0166). As a result, cryptographic key material may be guessable.
Update immidiatly openssh package or ask your hosting to do it.
Have a look here http://dilbert.com/strips/comic/2001-10-25/
Like you can see in this image this bug can create problem in the random generator keys.
Quote:
OVER HERE WE HAVE OUR RANDOM NUMBER GENERATOR
NINE, NINE, NINE, NINE
ARE YOU SURE THAT'S RANDOM?
THAT'S THE PROBLEM WITH RANDOMNESS, YOU CAN NEVER BE SURE
|
 |
|
|
Linear Mode
