Two significant security-related vulnerabilities have recently been identified in OpenSSH. These vulnerabilities might enable a remote attacker to execute code with the privileges of the user (often root) running the secure shell daemon, sshd. These vulnerabilities might also be used to create a denial-of-service (DoS) attack.

The details of these vulnerabilities can be found in the original CERT announcement at http://www.cert.org/advisories/CA-2002-18.html

Although all domestic (export-controlled) available releases of JUNOS software include OpenSSH, the version of OpenSSH included is not susceptible to these vulnerabilities. Customers do not need to upgrade their JUNOS software.

Worldwide releases of JUNOS software, and all releases of software for the G10 CMTS, do not include OpenSSH and are therefore not susceptible to these vulnerabilities.

No versions of JUNOS software are susceptible to these vulnerabilities, so no patch or fix required.