OpenSSH local root exploit

[Nothinman]

http://www.pine.nl/advisories/pine-cert-20020301.txt

So far it's only local, but remote hasn't been ruled out, if/when a remote exploit is conjured up the OpenBSD team will have to change their slogan =).

It also only affects versions 2.0 up to 3.0.2, so Debian potato users aren't effected and woody/sid have updated pacakges already =)

 

[Descartes]

Exploiting an obi-wan error is pretty difficult though...