Language Selection

English French German Italian Portuguese Spanish

Dangerous Security Flaw Likely Just a Hoax

Filed under
Security

A claim of a software vulnerability in a program used to connect securely to servers across the Internet is likely a hoax, according to an analyst with the SANS Internet Storm Center.

The program, called OpenSSH (Secure Shell), is installed on tens of millions of servers made by vendors such as Red Hat, Hewlett-Packard, Apple and IBM. It is used by administrators to make encrypted connections with other computers and do tasks such as remotely updating files. OpenSSH is the open-source version, and there are commercial versions of the program.

Earlier this week, SANS received an anonymous e-mail claiming of a zero-day vulnerability in OpenSSH, which means a flaw in the software is already being exploited as it becomes public. It's the most dangerous type of software vulnerability since it means there's no fix for it yet and the bad guys know about it.

A true zero-day vulnerability in OpenSSH could be devastating for the Internet, allowing hackers to have carte blanche access to servers and PCs until a workaround or a patch is readied.

"That's why I think people are actually creating quite a bit of a panic," said Bojan Zdrnja.

rest here




More in Tux Machines

AMD Catalyst 14.9 Linux Driver Is Out, Release Disappoints, as Usual

The AMD developers have announced that a new Catalyst 14.9 Linux driver is now out and that it brings support for a couple of new operating systems and a few bug fixes. New AMD Linux drivers don't arrive as often as the community wants or needs them and the company doesn't have the best track record in the open source world. As it stands right now, there are two kinds of drivers available to Linux users, one that's open source and another one that's proprietary. Catalyst 14.9 is made by AMD and provides better functionality than the open source one, but it doesn't get updated too often. Read more

Calibre for Linux Review – The Best App for Anything Related to eBooks

Calibre is the premiere application on the Linux platform to convert, edit, view, and download eBooks. It has so many features it would be difficult just to count them all, but it's time to take a closer look at this app and see what changed in the years that passed since our last review. Read more

Operating System U Fails To Live Up To Its Goals

After launching last month on Kickstarter, the project has turned into a failure and all development has ceased. Operating System U by Andrew Bernstein only raised $1,948 of its $50,000 goal over the month-long period for the OS that claimed numerous advantages over Ubuntu and Windows 8. Andrew then posted, "Unfortunately OS U was unsuccessful. I truly, truly appreciate everyone who backed us, but unfortunately since we where unsuccessful, combined with other circumstances, OS U will not have any more continued development." Read more

Calculate Intro, OpenMandriva Review, and Mageia Delay

Today in Linux news Jessie Smith has a nice article on Gentoo-derivative Calculate Linux 14 in this week's Distrowatch Weekly. Linuxbsdos.com has a review of OpenMandriva Lx 2014.1, released last week. Mageia 5 Beta 1 is delayed and openSUSE 11.4 is "truly, finally dead." We have all this and more in tonight's Linux news recap. Read more