[Bug 2209] Problem logging into Cisco devices under 6.5p1 (kexgexc.c)

[bugzilla-daemon at bugzilla.mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2209

--- Comment #9 from Darren Tucker <dtucker at zip.com.au> ---
No, the banner is sent before the KEX (it's the first thing on the
wire) but it is included in the exchange hash[0] which is later signed
by the server as part of the DH key exchange, so it is protected from
tampering by a MITM.

[0] https://tools.ietf.org/html/rfc4253#section-8

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.