Ubuntu
openssh package

ssh-vulnkey for dapper

Asked by Wouter Horré

Is there a version of ssh-vulnkey for dapper?

I have a dapper ssh-server where I would like to check the authorized_keys of the users for vulnerable keys. What are my options?

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu openssh Edit question
Assignee:
No assignee Edit question
Solved by:
berg
Solved:
Last query:
Last reply:
Revision history for this message
Best berg (berg-foss) said : 		#1

hello Wouter,
see at http://www.ubuntu.com/usn

USN-612-6: OpenVPN regression
USN-612-5: OpenSSH update
USN-612-4: ssl-cert vulnerability CVE-2008-0166
USN-612-3: OpenVPN vulnerability CVE-2008-0166
USN-612-2: OpenSSH vulnerability CVE-2008-0166
USN-612-1: OpenSSL vulnerability

this problem don't affect your version ( dapper 6.06 ), and don't need this check because the bug happened only with news versions but if you want :

http://lists.debian.org/debian-security-announce/2008/msg00152.html

Revision history for this message
Wouter Horré (wouterh) said : 		#2

I know dapper isn't directly affected. But it is indirectly as users could have added vulnerable keys to their authorized_keys! Thanks for the pointer to dowkd.pl.

Revision history for this message
Wouter Horré (wouterh) said : 		#3

Thanks berg, that solved my question.