xfocus logo xfocus title
首页 焦点原创 安全文摘 安全工具 安全漏洞 焦点项目 焦点论坛 关于我们
English Version

OpenSSH Challenge-Response远程缓冲溢出漏洞


发布时间:2002-06-27
更新时间:2002-06-27
严重程度:
威胁程度:远程管理员权限
错误类型:边界检查错误
利用方式:服务器模式

BUGTRAQ ID:5093

受影响系统
OpenSSH OpenSSH 1.2.2
OpenSSH OpenSSH 1.2.3
OpenSSH OpenSSH 2.1
OpenSSH OpenSSH 2.1.1
   + Conectiva Linux 5.1
   + S.u.S.E. Linux 7.0 alpha
   + S.u.S.E. Linux 7.0 i386
   + S.u.S.E. Linux 7.0 ppc
   + S.u.S.E. Linux 7.0 sparc
OpenSSH OpenSSH 2.2
   + Conectiva Linux 6.0
   + NetBSD NetBSD 1.5
OpenSSH OpenSSH 2.3
   + EnGarde Secure Linux 1.0.1
   - S.u.S.E. Linux 6.4 alpha
   - S.u.S.E. Linux 6.4 i386
   - S.u.S.E. Linux 6.4 ppc
   - S.u.S.E. Linux 7.0 alpha
   - S.u.S.E. Linux 7.0 i386
   - S.u.S.E. Linux 7.0 ppc
   - S.u.S.E. Linux 7.0 sparc
OpenSSH OpenSSH 2.5
OpenSSH OpenSSH 2.5.1
   + NetBSD NetBSD 1.5.1
   + S.u.S.E. Linux 7.1
   + S.u.S.E. Linux 7.2
   + S.u.S.E. Linux 7.3
   + S.u.S.E. Linux Database Server
   + S.u.S.E. Linux Enterprise Server 7
   + S.u.S.E. Linux Firewall on CD
   + S.u.S.E. SuSE eMail Server III
   - SCO Open Server 5.0
   - SCO Open Server 5.0.1
   - SCO Open Server 5.0.2
   - SCO Open Server 5.0.3
   - SCO Open Server 5.0.4
   - SCO Open Server 5.0.5
   - SCO Open Server 5.0.6
   - SCO Open Server 5.0.6 a
OpenSSH OpenSSH 2.5.2
   - Caldera OpenUnix 8.0
   - Caldera UnixWare 7.1.1
   - Wirex Immunix OS 6.2
OpenSSH OpenSSH 2.9 p2
   + Caldera OpenLinux Server 3.1
   + Caldera OpenLinux Server 3.1.1
   + Caldera OpenLinux Workstation 3.1
   + Caldera OpenLinux Workstation 3.1.1
   - Conectiva Linux ecommerce
   - Conectiva Linux graficas
   - Conectiva Linux 5.0
   + Conectiva Linux 6.0
   + Conectiva Linux 7.0
   + Conectiva Linux 8.0
   + FreeBSD FreeBSD 4.4 -RELENG
   + Immunix Immunix OS 7.0
   + MandrakeSoft Corporate Server 1.0.1
   + MandrakeSoft Linux Mandrake 7.1
   + MandrakeSoft Linux Mandrake 7.2
   + MandrakeSoft Linux Mandrake 8.0
   + MandrakeSoft Linux Mandrake 8.0 ppc
   + MandrakeSoft Linux Mandrake 8.1
   + MandrakeSoft Single Network Firewall 7.2
   + RedHat Linux 7.0
   + RedHat Linux 7.1
   + RedHat Linux 7.2
   - S.u.S.E. Linux 7.1 alpha
   - S.u.S.E. Linux 7.1 ppc
   - S.u.S.E. Linux 7.1 sparc
   - S.u.S.E. Linux 7.1 x86
   - S.u.S.E. Linux 7.2 i386
   - S.u.S.E. Linux 7.3 i386
   - S.u.S.E. Linux 7.3 ppc
   - S.u.S.E. Linux 7.3 sparc
   + Trustix Secure Linux 1.1
   + Trustix Secure Linux 1.2
   + Trustix Secure Linux 1.5
OpenSSH OpenSSH 2.9 p1
OpenSSH OpenSSH 2.9
OpenSSH OpenSSH 2.9.9
   + NetBSD NetBSD 1.5.2
OpenSSH OpenSSH 3.0
OpenSSH OpenSSH 3.0.1
OpenSSH OpenSSH 3.0.2
   - Debian Linux 3.0
   + FreeBSD FreeBSD 4.5 -RELEASE
   + FreeBSD FreeBSD 4.5 -STABLEpre2002-03-07
   + OpenPKG OpenPKG 1.0
   + Openwall Openwall GNU/*/Linux 0.1 -stable
   + S.u.S.E. Linux 8.0
OpenSSH OpenSSH 3.1
OpenSSH OpenSSH 3.2
   + OpenBSD OpenBSD 3.1
OpenSSH OpenSSH 3.3
   + Openwall Openwall GNU/*/Linux (Owl)-current
详细描述
OpenSSH报告OPENSSH程序存在漏洞,此漏洞允许未验证用户获得ROOT权限。

问题存在于OpenSSH SSH2 challenge-response机制中,当OpenSSH服务程序编译时支持BSD_AUTH或者SKEY可能导致缓冲溢出,OpenBSD 3.0和之后的版本支持BSD_AUTH认证,当SSH服务器存在如下配置选项的情况下系统存在漏洞:

PAMAuthenticationViaKbdInt

ChallengeResponseAuthentication

攻击者可以通过构建恶意Challenge-Response响应而触发缓冲溢出,由于此操作发生在验证进程之前,远程攻击者就可以无需认证利用此漏洞,进行缓冲溢出攻击,或者SHELLCODE执行。

测试代码
尚无

解决方案
OpenSSH 3.4已经推出,并对此漏洞进行了修补,不过建议管理员使用权限分离功能。

此漏洞当'ChallengeResponseAuthentication'或者'PAMAuthenticationViaKbdInt'选项在sshd_config中激活时就存在,临时方法是关闭这两个选项。

OpenSSH 3.3配置使用新的权利分离功能的服务程序不存在此漏洞,要使用权利分离功能,建立在sshd_config中使用如下配置选项:

UsePrivilegeSeparation yes

升级程序:

OpenSSH OpenSSH 1.2.2:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 1.2.3:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.1:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.1.1:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.2:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.3:

Guardian Digital Upgrade openssh-3.3p1-1.0.20.src.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/SRPMS/openssh-3.3p1-1.0.20.src.rpm
Source RPM.

Guardian Digital Upgrade openssh-3.3p1-1.0.20.i386.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/i386/openssh-3.3p1-1.0.20.i386.rpm

Guardian Digital Upgrade openssh-clients-3.3p1-1.0.20.i386.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/i386/openssh-clients-3.3p1-1.0.20.i386.rpm

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

Guardian Digital Upgrade openssh-server-3.3p1-1.0.20.i386.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/i386/openssh-server-3.3p1-1.0.20.i386.rpm

Guardian Digital Upgrade openssh-3.3p1-1.0.20.i686.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/i686/openssh-3.3p1-1.0.20.i686.rpm

Guardian Digital Upgrade openssh-clients-3.3p1-1.0.20.i686.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/i686/openssh-clients-3.3p1-1.0.20.i686.rpm

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

Guardian Digital Upgrade openssh-server-3.3p1-1.0.20.i686.rpm
http://ftp.engardelinux.org/pub/engarde/1.0.1/updates/i686/openssh-server-3.3p1-1.0.20.i686.rpm

OpenSSH OpenSSH 2.5:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.5.1:

S.u.S.E. RPM openssh-3.3p1-4.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/sec1/openssh-3.3p1-4.ppc.rpm
S.u.S.E. Linux 7.0 PPC.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.0 PPC source RPM.

S.u.S.E. RPM openssh-3.3p1-4.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.1/sec1/openssh-3.3p1-4.ppc.rpm
S.u.S.E. Linux 7.1 PPC.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.1/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.1 PPC source RPM.

S.u.S.E. RPM openssh-3.3p1-4.ppc.rpm
ftp://ftp.suse.de/pub/suse/ppc/update/7.0/sec1/openssh-3.3p1-4.ppc.rpm
S.u.S.E. Linux 7.0 PPC.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.de/pub/suse/ppc/update/7.0/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.0 PPC source RPM.

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

S.u.S.E. RPM openssh-3.3p1-6.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/sec1/openssh-3.3p1-6.i386.rpm
S.u.S.E. Linux 7.3 i386.

S.u.S.E. RPM openssh-3.3p1-6.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/zq1/openssh-3.3p1-6.src.rpm
S.u.S.E. Linux 7.3 i386 source RPM.

S.u.S.E. RPM openssh-3.3p1-6.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/sec1/openssh-3.3p1-6.i386.rpm
S.u.S.E. Linux 7.2 i386.

S.u.S.E. RPM openssh-3.3p1-6.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/zq1/openssh-3.3p1-6.src.rpm
S.u.S.E. Linux 7.2 i386 source RPM.

S.u.S.E. RPM openssh-3.3p1-6.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/sec1/openssh-3.3p1-6.i386.rpm
S.u.S.E. Linux 7.1 i386.

S.u.S.E. RPM openssh-3.3p1-6.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/zq1/openssh-3.3p1-6.src.rpm
S.u.S.E. Linux 7.1 i386 source RPM.

S.u.S.E. RPM openssh-3.3p1-6.i386.rpm
ftp://ftp.suse.de/pub/suse/i386/update/7.0/sec1/openssh-3.3p1-6.i386.rpm
S.u.S.E. Linux 7.0 i386.

S.u.S.E. RPM openssh-3.3p1-6.src.rpm
ftp://ftp.suse.de/pub/suse/i386/update/7.0/zq1/openssh-3.3p1-6.src.rpm
S.u.S.E. Linux 7.0 i386 source RPM.

S.u.S.E. RPM openssh-3.3p1-4.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/sec1/openssh-3.3p1-4.sparc.rpm
S.u.S.E. Linux 7.3 sparc.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.3 sparc source RPM.

S.u.S.E. RPM openssh-3.3p1-4.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.1/sec1/openssh-3.3p1-4.sparc.rpm
S.u.S.E. Linux 7.1 sparc.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.1/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.1 sparc source RPM.

S.u.S.E. RPM openssh-3.3p1-4.sparc.rpm
ftp://ftp.suse.de/pub/suse/sparc/update/7.0/sec1/openssh-3.3p1-4.sparc.rpm
S.u.S.E. Linux 7.0 sparc.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.de/pub/suse/sparc/update/7.0/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.0 sparc source RPM.

S.u.S.E. RPM openssh-3.3p1-4.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/7.1/sec1/openssh-3.3p1-4.alpha.rpm
S.u.S.E. Linux 7.1 Alpha.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.com/pub/suse/axp/update/7.1/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.1 Alpha source RPM.

S.u.S.E. RPM openssh-3.3p1-4.alpha.rpm
ftp://ftp.suse.de/pub/suse/axp/update/7.0/sec1/openssh-3.3p1-4.alpha.rpm
S.u.S.E. Linux 7.0 Alpha.

S.u.S.E. RPM openssh-3.3p1-4.src.rpm
ftp://ftp.suse.de/pub/suse/axp/update/7.0/zq1/openssh-3.3p1-4.src.rpm
S.u.S.E. Linux 7.0 Alpha source RPM.

OpenSSH OpenSSH 2.5.2:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.9 p2:

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake 7.1 i586 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake 7.1 i586.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake 7.1 i586.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake 7.1 i586.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake 7.1 i586.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake 7.1 i586.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.1/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 7.1 i586 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.2/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake 7.2 i586.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.2/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake 7.2 i586.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.2/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake 7.2 i586.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.2/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake 7.2 i586.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.2/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake 7.2 i586.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/7.2/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 7.2 i586 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://ftp.nmt.edu/pub/linux/mandrake/updates/8.0/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake 8.0 i586.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.0/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake 8.0 i586.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.0/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake 8.0 i586.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.0/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake 8.0 i586.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.0/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake 8.0 i586.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.0/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 8.0 i586 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.0/RPMS/openssh-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.0 PPC.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.0/RPMS/openssh-askpass-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.0 PPC.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.0/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.0 PPC.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.0/RPMS/openssh-clients-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.0 PPC.

Mandrake RPM openssh-server-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.0/RPMS/openssh-server-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.0 PPC.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.0/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 8.0 PPC source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.1/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake 8.1 i586.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.1/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake 8.1 i586.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.1/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake 8.1 i586.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.1/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake 8.1 i586.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.1/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake 8.1 i586.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.1/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 8.1 i586 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.ia64.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ia64/8.1/RPMS/openssh-3.3p1-3.1mdk.ia64.rpm
Mandrake 8.1 ia64.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.ia64.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ia64/8.1/RPMS/openssh-askpass-3.3p1-3.1mdk.ia64.rpm
Mandrake 8.1 ia64.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.ia64.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ia64/8.1/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.ia64.rpm
Mandrake 8.1 ia64.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.ia64.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ia64/8.1/RPMS/openssh-clients-3.3p1-3.1mdk.ia64.rpm
Mandrake 8.1 ia64.

Mandrake RPM openssh-server-3.3p1-3.1mdk.ia64.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ia64/8.1/RPMS/openssh-server-3.3p1-3.1mdk.ia64.rpm
Mandrake 8.1 ia64.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ia64/8.1/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 8.1 ia64 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.2/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake 8.2 i586.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.2/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake 8.2 i586.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.2/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake 8.2 i586.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.2/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake 8.2 i586.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.2/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake 8.2 i586.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/8.2/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 8.2 i586 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.2/RPMS/openssh-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.2 PPC.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.2/RPMS/openssh-askpass-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.2 PPC.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.2/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.2 PPC.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.2/RPMS/openssh-clients-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.2 PPC.

Mandrake RPM openssh-server-3.3p1-3.1mdk.ppc.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.2/RPMS/openssh-server-3.3p1-3.1mdk.ppc.rpm
Mandrake 8.2 PPC.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/ppc/8.2/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake 8.2 PPC source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/1.0.1/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake Corporate Server 1.0.1.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/1.0.1/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake Corporate Server 1.0.1.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/1.0.1/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake Corporate Server 1.0.1.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/1.0.1/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake Corporate Server 1.0.1.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/1.0.1/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake Corporate Server 1.0.1.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/1.0.1/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake Corporate Server 1.0.1 source RPM.

Mandrake RPM openssh-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/snf7.2/RPMS/openssh-3.3p1-3.1mdk.i586.rpm
Mandrake Single Network Firewall 7.2.

Mandrake RPM openssh-askpass-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/snf7.2/RPMS/openssh-askpass-3.3p1-3.1mdk.i586.rpm
Mandrake Single Network Firewall 7.2.

Mandrake RPM openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/snf7.2/RPMS/openssh-askpass-gnome-3.3p1-3.1mdk.i586.rpm
Mandrake Single Network Firewall 7.2.

Mandrake RPM openssh-clients-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/snf7.2/RPMS/openssh-clients-3.3p1-3.1mdk.i586.rpm
Mandrake Single Network Firewall 7.2.

Mandrake RPM openssh-server-3.3p1-3.1mdk.i586.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/snf7.2/RPMS/openssh-server-3.3p1-3.1mdk.i586.rpm
Mandrake Single Network Firewall 7.2.

Mandrake RPM openssh-3.3p1-3.1mdk.src.rpm
ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/updates/snf7.2/SRPMS/openssh-3.3p1-3.1mdk.src.rpm
Mandrake Single Network Firewall 7.2 source RPM.

Conectiva RPM openssh-3.3p1-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openssh-3.3p1-1U60_1cl.i386.rpm

Conectiva RPM openssh-askpass-3.3p1-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openssh-askpass-3.3p1-1U60_1cl.i386.rpm

Conectiva RPM openssh-askpass-gnome-3.3p1-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openssh-askpass-gnome-3.3p1-1U60_1cl.i386.rpm

Conectiva RPM openssh-clients-3.3p1-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openssh-clients-3.3p1-1U60_1cl.i386.rpm

Conectiva RPM openssh-server-3.3p1-1U60_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/6.0/RPMS/openssh-server-3.3p1-1U60_1cl.i386.rpm

Conectiva RPM openssh-3.3p1-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openssh-3.3p1-1U70_1cl.i386.rpm

Conectiva RPM openssh-askpass-3.3p1-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openssh-askpass-3.3p1-1U70_1cl.i386.rpm

Conectiva RPM openssh-askpass-gnome-3.3p1-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openssh-askpass-gnome-3.3p1-1U70_1cl.i386.rpm

Conectiva RPM openssh-clients-3.3p1-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openssh-clients-3.3p1-1U70_1cl.i386.rpm

Conectiva RPM openssh-server-3.3p1-1U70_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/7.0/RPMS/openssh-server-3.3p1-1U70_1cl.i386.rpm

Conectiva RPM openssh-3.3p1-1U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/openssh-3.3p1-1U8_1cl.i386.rpm

Conectiva RPM openssh-askpass-3.3p1-1U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/openssh-askpass-3.3p1-1U8_1cl.i386.rpm

Conectiva RPM openssh-askpass-gnome-3.3p1-1U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/openssh-askpass-gnome-3.3p1-1U8_1cl.i386.rpm

Conectiva RPM openssh-clients-3.3p1-1U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/openssh-clients-3.3p1-1U8_1cl.i386.rpm

Conectiva RPM openssh-server-3.3p1-1U8_1cl.i386.rpm
ftp://atualizacoes.conectiva.com.br/8/RPMS/openssh-server-3.3p1-1U8_1cl.i386.rpm

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.9 p1:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.9:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 2.9.9:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 3.0:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 3.0.1:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 3.0.2:

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0potato6_alpha.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0potato6_alpha.deb
Debian GNU/Linux 2.2 Alpha.

Debian Upgrade ssh_3.3p1-0.0potato6_arm.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0potato6_arm.deb
Debian GNU/Linux 2.2 ARM.

Debian Upgrade ssh_3.3p1-0.0woody4_i386.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_i386.deb
Debian GNU/Linux 3.0 i386.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_i386.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_i386.deb
Debian GNU/Linux 3.0 i386.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_ia64.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_ia64.deb
Debian GNU/Linux 3.0 ia64.

Debian Upgrade ssh_3.3p1-0.0woody4_ia64.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_ia64.deb
Debian GNU/Linux 3.0 ia64.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_mips.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_mips.deb
Debian GNU/Linux 3.0 MIPS.

Debian Upgrade ssh_3.3p1-0.0woody4_mips.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_mips.deb
Debian GNU/Linux 3.0 MIPS.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_mipsel.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_mipsel.deb
Debian GNU/Linux 3.0 MIPS (Little Endian).

Debian Upgrade ssh_3.3p1-0.0woody4_mipsel.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_mipsel.deb
Debian GNU/Linux 3.0 MIPS (Little Endian).

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_powerpc.deb
Debian GNU/Linux 3.0 PPC.

Debian Upgrade ssh_3.3p1-0.0woody4_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_powerpc.deb
Debian GNU/Linux 3.0 PPC.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_s390.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_s390.deb
Debian GNU/Linux 3.0 s390.

Debian Upgrade ssh_3.3p1-0.0woody4_s390.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_s390.deb
Debian GNU/Linux 3.0 s390.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_sparc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_sparc.deb
Debian GNU/Linux 3.0 sparc.

Debian Upgrade ssh_3.3p1-0.0woody4_sparc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_sparc.deb
Debian GNU/Linux 3.0 sparc.

Debian Upgrade openssl_0.9.6c.orig.tar.gz
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c.orig.tar.gz
Debian GNU/Linux 2.2 source.

Debian Upgrade openssl_0.9.6c-0.potato.1.diff.gz
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1.diff.gz
Debian GNU/Linux 2.2 source.

Debian Upgrade openssl_0.9.6c-0.potato.1.dsc
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1.dsc
Debian GNU/Linux 2.2 source.

Debian Upgrade libssl0.9.6_0.9.6c-0.potato.1_alpha.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.6_0.9.6c-0.potato.1_alpha.deb
Debian GNU/Linux 2.2 Alpha.

Debian Upgrade openssl_0.9.6c-0.potato.1_alpha.deb
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1_alpha.deb
Debian GNU/Linux 2.2 Alpha.

Debian Upgrade libssl-dev_0.9.6c-0.potato.1_alpha.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9.6c-0.potato.1_alpha.deb
Debian GNU/Linux 2.2 Alpha.

Debian Upgrade libssl0.9.6_0.9.6c-0.potato.1_arm.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.6_0.9.6c-0.potato.1_arm.deb
Debian GNU/Linux 2.2 ARM.

Debian Upgrade libssl-dev_0.9.6c-0.potato.1_arm.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9.6c-0.potato.1_arm.deb
Debian GNU/Linux 2.2 ARM.

Debian Upgrade openssl_0.9.6c-0.potato.1_arm.deb
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1_arm.deb
Debian GNU/Linux 2.2 ARM.

Debian Upgrade libssl-dev_0.9.6c-0.potato.1_i386.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9.6c-0.potato.1_i386.deb
Debian GNU/Linux 2.2 i386.

Debian Upgrade libssl0.9.6_0.9.6c-0.potato.1_i386.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.6_0.9.6c-0.potato.1_i386.deb
Debian GNU/Linux 2.2 i386.

Debian Upgrade openssl_0.9.6c-0.potato.1_i386.deb
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1_i386.deb
Debian GNU/Linux 2.2 i386.

Debian Upgrade openssl_0.9.6c-0.potato.1_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1_powerpc.deb
Debian GNU/Linux 2.2 PPC.

Debian Upgrade libssl-dev_0.9.6c-0.potato.1_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9.6c-0.potato.1_powerpc.deb
Debian GNU/Linux 2.2 PPC.

Debian Upgrade libssl0.9.6_0.9.6c-0.potato.1_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.6_0.9.6c-0.potato.1_powerpc.deb
Debian GNU/Linux 2.2 PPC.

Debian Upgrade libssl-dev_0.9.6c-0.potato.1_sparc.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_0.9.6c-0.potato.1_sparc.deb
Debian GNU/Linux 2.2 sparc.

Debian Upgrade libssl0.9.6_0.9.6c-0.potato.1_sparc.deb
http://security.debian.org/pool/updates/main/o/openssl/libssl0.9.6_0.9.6c-0.potato.1_sparc.deb
Debian GNU/Linux 2.2 sparc.

Debian Upgrade openssl_0.9.6c-0.potato.1_sparc.deb
http://security.debian.org/pool/updates/main/o/openssl/openssl_0.9.6c-0.potato.1_sparc.deb
Debian GNU/Linux 2.2 sparc.

Debian Upgrade ssh_3.3p1-0.0potato6_alpha.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0potato6_alpha.deb
Debian GNU/Linux 2.2 Alpha.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0potato6_arm.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0potato6_arm.deb
Debian GNU/Linux 2.2 ARM.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0potato6_i386.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0potato6_i386.deb
Debian GNU/Linux 2.2 i386.

Debian Upgrade ssh_3.3p1-0.0potato6_i386.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0potato6_i386.deb
Debian GNU/Linux 2.2 i386.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0potato6_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0potato6_powerpc.deb
Debian GNU/Linux 2.2 PPC.

Debian Upgrade ssh_3.3p1-0.0potato6_powerpc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0potato6_powerpc.deb
Debian GNU/Linux 2.2 PPC.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0potato6_sparc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0potato6_sparc.deb
Debian GNU/Linux 2.2 sparc.

Debian Upgrade ssh_3.3p1-0.0potato6_sparc.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0potato6_sparc.deb
Debian GNU/Linux 2.2 sparc.

S.u.S.E. RPM openssh-3.3p1-6.i386.patch.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/sec1/openssh-3.3p1-6.i386.patch.rpm
S.u.S.E. Linux 8.0 i386.

S.u.S.E. RPM openssh-3.3p1-6.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/sec1/openssh-3.3p1-6.i386.rpm
S.u.S.E. Linux 8.0 i386.

S.u.S.E. RPM openssh-3.3p1-6.src.rpm
ftp://ftp.suse.com/pub/suse/i386/update/8.0/zq1/openssh-3.3p1-6.src.rpm
S.u.S.E. Linux 8.0 i386.

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

Openwall Upgrade openssh-3.3p1-owl1.i386.rpm
tp://ftp.ca.openwall.com/pub/Owl/current/i386/RPMS/openssh-3.3p1-owl1.i386.rpm

Openwall Upgrade openssh-clients-3.3p1-owl1.i386.rpm
ftp://ftp.ca.openwall.com/pub/Owl/current/i386/RPMS/openssh-clients-3.3p1-owl1.i386.rpm

Openwall Upgrade openssh-server-3.3p1-owl1.i386.rpm
ftp://ftp.ca.openwall.com/pub/Owl/current/i386/RPMS/openssh-server-3.3p1-owl1.i386.rpm

Debian Upgrade openssh_3.3p1-0.0woody4.dsc
http://security.debian.org/pool/updates/main/o/openssh/openssh_3.3p1-0.0woody4.dsc
Debian GNU/Linux 3.0 source.

Debian Upgrade openssh_3.3p1.orig.tar.gz
http://security.debian.org/pool/updates/main/o/openssh/openssh_3.3p1.orig.tar.gz
Debian GNU/Linux 3.0 source.

Debian Upgrade openssh_3.3p1-0.0woody4.diff.gz
http://security.debian.org/pool/updates/main/o/openssh/openssh_3.3p1-0.0woody4.diff.gz
Debian GNU/Linux 3.0 source.

Debian Upgrade ssh_3.3p1-0.0woody4_alpha.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_alpha.deb
Debian GNU/Linux 3.0 Alpha.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_alpha.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_alpha.deb
Debian GNU/Linux 3.0 Alpha.

Debian Upgrade ssh_3.3p1-0.0woody4_arm.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_arm.deb
Debian GNU/Linux 3.0 ARM.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_arm.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_arm.deb
Debian GNU/Linux 3.0 ARM.

Debian Upgrade ssh-askpass-gnome_3.3p1-0.0woody4_hppa.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh-askpass-gnome_3.3p1-0.0woody4_hppa.deb
Debian GNU/Linux 3.0 HP PA RISC.

Debian Upgrade ssh_3.3p1-0.0woody4_hppa.deb
http://security.debian.org/pool/updates/main/o/openssh/ssh_3.3p1-0.0woody4_hppa.deb
Debian GNU/Linux 3.0 HP PA RISC.

OpenSSH OpenSSH 3.1:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 3.2:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems.

OpenSSH OpenSSH 3.3:

OpenSSH Upgrade OpenSSH 3.4 (Portable)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.4p1.tar.gz
The portable verion. Administrators of systems other than OpenBSD are required to build and install this upgrade.

OpenSSH Upgrade OpenSSH 3.4 (OpenBSD)
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.4.tgz
This version of the upgrade is for OpenBSD systems

相关信息
Mark Dowd of the ISS X-Force
参考:http://online.securityfocus.com/advisories/4233
http://online.securityfocus.com/advisories/4230
http://online.securityfocus.com/advisories/4234