Results 1 to 5 of 5

Thread: Installing pre-shellshock openshh-server

  1. #1
    Join Date
    Dec 2010

    Installing pre-shellshock openshh-server

    I'm writing a paper for my pen testing class that details the shellshock bug of last fall. Details:
    Host machine is running 64 bit Trusty
    Running Virtual box
    Virtual machine running Kali
    Virtual machine running Maverick

    The idea is use either Kali or Trusty to hack into Maverick, use the shellshock bug to get into the system. That's the easy part.

    Here's the hard bit:
    The network works fine, all 3 machines can ping and see each other.
    All ports on Maverick are closed (I've done little to no configuring, absolutely no updating).
    I want to open port 22 (ssh) to give me an in for the demonstration.
    sooooo I need to install openssh-server
    Should be no problem, but I'm getting nowhere:

    Reading state information... Done
    package openssh-server is not available, but is referred to by another package.
    This may mean that the package is missing, has been obsoleted, or is only available from another source
    E: Package 'openssh-server' has no installation candidate
    I'm figuring that, because Maverick is no longer supported I'm having this problem???
    If so, any work arounds / ideas?

    regards, Richard

  2. #2
    Join Date
    Dec 2010

    Precise and shellshock

    I'm doing a project for my Masters that documents and demonstrates the shellshock vulnerability (in a vm). In another thread I'm seeking help to do this with Maverick. I chose Maverick because it's obviously vulnerable, but if I can't get openssh installed on it (that's the question in the other thread) because it is no longer supported (I suspect this to be the cause of my woes) then my question here is:

    As the shellshock patches didn't come in until 8 months after Precise was released, if I use Precise instead would it install vulnerable? In other words, do the maintainers go back and change the original code as well as send out the patch in updates (bad for me) or are patches only released in updates (good for me, I don't want it patched)?

    regards, Richard

  3. #3
    Join Date
    Jun 2009
    New Mexico
    Xubuntu 20.04 Focal Fossa

    Re: Precise and shellshock

  4. #4
    Join Date
    Jun 2006
    Ubuntu 22.04 Jammy Jellyfish

    Re: Installing pre-shellshock openshh-server

    Let's keep this all in one thread since the question is: how do you install pre-shellshock openssh-server in Ubuntu. The actual release doesn't really matter.

    Threads merged and thread title changed..

    Egeezer is correct in that the old-releases repository is probably your best bet, but the actual link won't help as that leads you to old ISOs.

    You've got two options.

    Use this link - – to change your sources in Maverick. You don't need to upgrade – all you need is the edit to sources.list.

    Or have a look here:

    That's got versions of openssh-server going back to 2004. You can download them and then install them manually, but the trick would be to match the version of openssh-server to the Ubuntu release it belongs to.

    Have fun!!
    Last edited by coffeecat; April 25th, 2015 at 11:17 PM.
    Ubuntu 22.04 Desktop Guide - Ubuntu 24.04 Desktop Guide - Forum Guide to BBCode - Using BBCode code tags

    Member: Not Canonical Team

    If you need help with your forum account, such as SSO login issues, username changes, etc, the correct place to contact an admin is here. Please do not PM me about these matters unless you have been asked to - unsolicited PMs concerning forum accounts will be ignored.

  5. #5
    Join Date
    Dec 2010

    Re: Installing pre-shellshock openshh-server

    Thanks for all the help!

Tags for this Thread


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts