Lucene search
RedhatCVELIST:CVE-2014-9278HistoryDec 06, 2014 - 3:00 p.m.
CVE-2014-9278
2014-12-0615:00:00
redhat
www.cve.org
7
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login.
References
rhn.redhat.com/errata/RHSA-2015-0425.html
thread.gmane.org/gmane.comp.encryption.kerberos.general/15855
www.openwall.com/lists/oss-security/2014/12/02/3
www.openwall.com/lists/oss-security/2014/12/04/17
www.securityfocus.com/bid/71420
bugzilla.mindrot.org/show_bug.cgi?id=1867
bugzilla.redhat.com/show_bug.cgi?id=1169843
exchange.xforce.ibmcloud.com/vulnerabilities/99090
Related
prion
prion
Authentication flaw
2014-12-06 15:59:00
nvd
nvd
CVE-2014-9278
2014-12-06 15:59:07
f5
f5
SOL16009 - OpenSSH vulnerability CVE-2014-9278
2015-01-21 00:00:00
K16009 : OpenSSH vulnerability CVE-2014-9278
2015-01-22 00:00:00
debiancve
debiancve
CVE-2014-9278
2014-12-06 15:59:07
ubuntucve
ubuntucve
CVE-2014-9278
2014-12-06 00:00:00
cve
cve
CVE-2014-9278
2014-12-06 15:59:07
nessus
nessus
RHEL 7 : openssh (RHSA-2015:0425)
2015-03-05 00:00:00
Oracle Linux 7 : openssh (ELSA-2015-0425)
2015-03-10 00:00:00
CentOS 7 : openssh (CESA-2015:0425)
2015-03-18 00:00:00
redhat
redhat
(RHSA-2015:0425) Moderate: openssh security, bug fix and enhancement update
2015-03-05 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2015-0425)
2015-10-06 00:00:00
Fedora Update for openssh FEDORA-2015-11067
2015-07-11 00:00:00
Fedora Update for openssh FEDORA-2015-12054
2015-08-11 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-15.fc21
2015-08-03 04:31:13
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-13.fc21
2015-07-10 19:09:25
centos
centos
openssh, pam_ssh_agent_auth security update
2015-03-17 13:29:24
oraclelinux
oraclelinux
openssh security, bug fix and enhancement update
2015-03-09 00:00:00
symantec
symantec
SA104 : OpenSSH Vulnerabilities
2015-12-08 08:00:00