[Savannah-hackers] there really is a ssh problem > IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

[Mathieu Roy]

I get this when I try to upload a file via scp:

address@hidden pdbv]$ scp -vr /tmp/sv_upload/* 
address@hidden:/upload/pdbv
Executing: program /usr/bin/ssh host freesoftware.fsf.org, user yeupou, 
command scp -v -r -d -t /upload/pdbv
OpenSSH_3.1p1, SSH protocols 1.5/2.0, OpenSSL 0x0090602f
debug1: Reading configuration data /home/moa/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Rhosts Authentication disabled, originating port will not be 
trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 501 geteuid 0 anon 1
debug1: Connecting to freesoftware.fsf.org [199.232.41.7] port 22.
debug1: temporarily_use_uid: 501/100 (e=0)
debug1: restore_uid
debug1: temporarily_use_uid: 501/100 (e=0)
debug1: restore_uid
debug1: Connection established.
debug1: read PEM private key done: type DSA
debug1: read PEM private key done: type RSA
debug1: identity file /home/moa/.ssh/identity type 0
debug1: Remote protocol version 1.99, remote software version 
OpenSSH_3.4p1 Debian 1:3.4p1-0.0woody1
debug1: match: OpenSSH_3.4p1 Debian 1:3.4p1-0.0woody1 pat OpenSSH*
debug1: Local version string SSH-1.5-OpenSSH_3.1p1
debug1: Waiting for server public key.
debug1: Received server public key (768 bits) and host key (1024 bits).
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@       WARNING: POSSIBLE DNS SPOOFING DETECTED!          @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
The RSA1 host key for freesoftware.fsf.org has changed,
and the key for the according IP address 199.232.41.7
is unknown. This could either mean that
DNS SPOOFING is happening or the IP address for the host
and its host key have changed at the same time.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle 
attack)!
It is also possible that the RSA1 host key has just been changed.
The fingerprint for the RSA1 key sent by the remote host is
fa:73:fd:5b:f3:56:3c:dd:2d:06:b7:f9:6c:46:8e:05.
Please contact your system administrator.
Add correct host key in /home/moa/.ssh/known_hosts to get rid of this 
message.
Offending key in /home/moa/.ssh/known_hosts:3
RSA1 host key for freesoftware.fsf.org has changed and you have 
requested strict checking.
Host key verification failed.
debug1: Calling cleanup 0x80634c0(0x0)
lost connection



--
Mathieu Roy
 http://savannah.gnu.org/users/yeupou
http://yeupou.coleumes.org
http://gpg.coleumes.org (GPG Key)