PacketSource — Security White Papers
 
A A A
 

One Incident Of Remediating The CRC 32 sshd1 Vulnerability

Author: Rebecca Sander Published Feb. 24, 2011 from SANS

The purpose of this paper is to document the process I used to respond to the CRC32 sshd1 vulnerability. My operating environment is primary Solaris and Linux, with a small percentage of HPUX and OpenBSD. Most systems are behind a corporate firewall, but a few are on the internet and used as data transfer points. This is only the process I used, and not the only acceptable response. I will document the four steps I used and my results.

Tags:

PDFRead the complete paper at SANS