Description

Globus has acknowledged two vulnerabilities in GSI-OpenSSH, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.

For more information:
SA22091
SA22173

The vulnerabilities are reported in the following products and versions:
* Globus Toolkit versions 4.0.0-4.0.3 and 4.1.0-4.1.1
* GSI-OpenSSH version 3.8 and prior

NOTE: Globus Toolkit 4.0.4 reportedly includes GSI-OpenSSH 3.9, which is not affected. Globus Toolkit 3.2 and prior reportedly do not include GSI-OpenSSH.

Solution
Update to GSI-OpenSSH version 3.9.
Further details available to Secunia VIM customers

Original Advisory
http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers