[ale] Known SSH exploits?

[Jim Popovitch]

Geeze People.... Yes, SSH has it's vulnerabilities... the problem is not
that they can't be patched/fixed, but rather keeping up with all the
possible different versions of SSH and the servers supporting SSH.  Plus,
where is there a reliable source of SSH debs,rpms,pkgs,msis,etc.  It can
easily be argued that no security is better than false security.

My Guess:  Given the company in question, and their involvement with Fed
contracts, the more likely case is that the company is abandoning external
SSH access in favor of a easily maintained VPN solution.

-Jim P.









---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.