OpenSSH Security Advisory (adv.iss)

[Damien Miller]

On Thu, 2002-06-27 at 03:44, Bob Van Cleef wrote:
> Question:  If ChallengeResponseAuthentication is set to 'no' in
> sshd_config, can the bug be exploited in OpenSSH_3.1p1?  

No, but there are other fixes so you should upgrade anyway.

-d