Lucene search

[email protected]CVE-2001-1459

HistoryJun 19, 2001 - 4:00 a.m.

CVE-2001-1459

2001-06-1904:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-1459

openssh

pluggable authentication module

pam

resource limits

bypass

nvd

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.8%

JSON

OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.

CPENameOperatorVersion
openbsd:opensshopenbsd openssheq2.1.1
openbsd:opensshopenbsd openssheq2.5.1
openbsd:opensshopenbsd openssheq2.2
openbsd:opensshopenbsd openssheq2.1
openbsd:opensshopenbsd openssheq2.9
openbsd:opensshopenbsd openssheq2.5.2
openbsd:opensshopenbsd openssheq2.3
openbsd:opensshopenbsd openssheq2.5

CPE	Name	Operator	Version
openbsd:openssh	openbsd openssh	eq	2.1.1
openbsd:openssh	openbsd openssh	eq	2.5.1
openbsd:openssh	openbsd openssh	eq	2.2
openbsd:openssh	openbsd openssh	eq	2.1
openbsd:openssh	openbsd openssh	eq	2.9
openbsd:openssh	openbsd openssh	eq	2.5.2
openbsd:openssh	openbsd openssh	eq	2.3
openbsd:openssh	openbsd openssh	eq	2.5

References

marc.info/?l=bugtraq&m=99324968918628&w=2

www.kb.cert.org/vuls/id/797027

www.securityfocus.com/bid/2917

exchange.xforce.ibmcloud.com/vulnerabilities/6757

6.7 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.8%

JSON

Related for CVE-2001-1459

nessus2 debiancve1 openvas1