[Gllug] CVS and SSh

[pauln at truemesh.com]

On Tue, Apr 30, 2002 at 06:35:55PM +0100, Rev Simon Rumble wrote:
> On Tue 30 Apr, Simon Stewart bloviated thus:
> 
> > I don't want to drop down to SSH 1 for obvious reasons. Advice,
> > suggestions, RTFMs etc accepted (and often appreciated ;)
> 
> Actually, the reasons aren't obvious.  SSH2 was created by SSH Inc for
> commercial reasons, not AFAIK for any technical reason.

There are some protocol weaknesses in SSH 1 and SSH 1.5 protocols

e.g.

http://razor.bindview.com/publish/advisories/adv_ssh1crc.html
http://www.corest.com/common/showdoc.php?idx=82&idxseccion=10
http://www.corest.com/common/showdoc.php?idx=81&idxseccion=10
http://www.openwall.com/advisories/OW-003-ssh-traffic-analysis.txt

Paul

-- 
Gllug mailing list  -  Gllug at linux.co.uk
http://list.ftech.net/mailman/listinfo/gllug