[PLUG-Devel] HackFest Series: Sans Threat Diary TODAY = Plaintext Recovery Attack Against OpenSSH

[Lisa Kachold]

11/17/08 SSH Vulnerability CPNI Advisory

CPNI says: "We expect any RFC-compliant SSH implementation to be vulnerable to some form of the attack."

Reference:  http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt

== SANS excerpt ==