OpenSSH patch

Ron Colvin Ron.Colvin at nasa.gov
Fri Aug 14 18:38:23 UTC 2015


OK. I was mostly looking for a scorable control(s).

On 8/14/15 2:34 PM, Paul Whitney wrote:
> I use pam_tally2 for that.
>
>
> Paul Whitney
> email: paul.whitney at mac.com
> cell: 410.493.9448
>
> Sent from my iPhone
>
>> On Aug 14, 2015, at 13:47, Ron Colvin <Ron.Colvin at nasa.gov> wrote:
>>
>> A patch for the SSH bug that bypassed the MaxAuthTries limit was just patched. Has MaxAuthTries been considered as a control in the security guide?
>>
>> http://www.openssh.com/txt/release-7.0
>> https://threatpost.com/openssh-7-0-fixes-four-flaws/114265
>>
>> -- 
>>
>>
>> ********************************************************
>> Ron Colvin CISSP, CAP, CEH
>> Certified Security Analyst
>> NASA - Goddard Space Flight Center
>> <ron.colvin at nasa.gov>
>> Direct phone 301-286-2451
>> NASA Jabber (rdcolvin at im.nasa.gov) AIM rcolvin13
>> NASA LCS (ronald.d.colvin at nasa.gov)
>> ********************************************************
>>
>>

-- 


********************************************************
Ron Colvin CISSP, CAP, CEH
Certified Security Analyst
NASA - Goddard Space Flight Center
<ron.colvin at nasa.gov>
Direct phone 301-286-2451
NASA Jabber (rdcolvin at im.nasa.gov) AIM rcolvin13
NASA LCS (ronald.d.colvin at nasa.gov)
********************************************************


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7418 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20150814/3204fa91/attachment-0001.p7s>


More information about the scap-security-guide mailing list