Security App OpenSSH Carries TrojanSecurity App OpenSSH Carries Trojan

Several versions of OpenSSH contain a Trojan horse--an application that lets attackers gain unauthorized access to a system. The infection, discovered Thursday, affects OpenSSH versions 3.2.2p1, 3.4p1, and 3.4, an advisory on the OpenSSH Web site warns.

The infection is believed to have been inserted Tuesday or Wednesday. According to the security alert, the malicious app is run when the OpenSSH software is compiled. Infected systems can be controlled by the attacker.

The popular OpenSSH Unix SSH protocol, part of the OpenBSD project, is used for secure file transfers and remote connections. More information can be found on the Open SSH Web site.