Subject: bin/35965: SSHD doesn't work with protocol 1
To: None <gnats-admin@netbsd.org, netbsd-bugs@netbsd.org>
From: None <jam@pobox.com>
List: netbsd-bugs
Date: 03/10/2007 01:35:00
>Number: 35965
>Category: bin
>Synopsis: SSHD from 3/8 00:00 UTC source doesn't work under protocol 1
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: bin-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Sat Mar 10 01:35:00 +0000 2007
>Originator: Kazushi Jam Marukawa
>Release: NetBSD 4.99.13
>Organization:
N/A
>Environment:
System: NetBSD sou 4.99.13 NetBSD 4.99.13 (XEN3_DOMU) #0: Sat Mar 10 00:36:15 JST 2007 jam@fs:/usr/obj/mnt/raid/netbsd/current/src/sys/arch/i386/compile/XEN3_DOMU i386
Architecture: i386
Machine: i386
>Description:
SSHD from 3/8 00:00 UTC source doesn't work under protocol 1.
This is a log taken from another machine using 4.99.3.
$ ssh -vvv -1 fs
OpenSSH_4.4 NetBSD_Secure_Shell-20060928, OpenSSL 0.9.8b 04 May 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to fs [192.168.24.3] port 22.
debug1: Connection established.
debug1: identity file /home/jam/.ssh/identity type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_4.4 NetBSD
_Secure_Shell-20061114
debug1: match: OpenSSH_4.4 NetBSD_Secure_Shell-20061114 pat OpenSSH*
debug1: Local version string SSH-1.5-OpenSSH_4.4 NetBSD_Secure_Shell-20060928
debug2: fd 4 setting O_NONBLOCK
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
debug3: check_host_in_hostfile: filename /home/jam/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 6
debug3: check_host_in_hostfile: filename /home/jam/.ssh/known_hosts
debug3: check_host_in_hostfile: match line 6
debug1: Host 'fs' is known and matches the RSA1 host key.
debug1: Found key in /home/jam/.ssh/known_hosts:6
debug1: Encryption type: 3des
debug1: Sent encrypted session key.
debug2: cipher_init: set keylen (16 -> 32)
debug2: cipher_init: set keylen (16 -> 32)
debug1: Installing crc compensation attack detector.
Disconnecting: Corrupted check bytes on input.
$
>How-To-Repeat:
Compile and install 3/8 00:00 UTC kernel and userland.
Then, try to connect that machine from another machine
using SSH protocol 1
>Fix:
Not sure.
>Unformatted:
Source is taken from 2007/3/8 00:00 UTC