Description: Debian has issued an update for openssh. This fixes a vulnerability, which can be exploited by malicious, local users to disclose potentially sensitive information and a security issue, which can lead to weak cryptographic key material.
Changelog: 2008-05-19: Updated "Solution" with new package information. The ssh-vulnkey tool introduced in openssh 1:4.3p2-9etch1 contains an error, leading to some compromised keys not being listed in ssh-vulnkey's output. Updated "Original Advisory" section.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
