Lucene search
RedhatCVELIST:CVE-2014-9278HistoryDec 06, 2014 - 3:00 p.m.
CVE-2014-9278
2014-12-0615:00:00
redhat
www.cve.org
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login.
References
rhn.redhat.com/errata/RHSA-2015-0425.html
thread.gmane.org/gmane.comp.encryption.kerberos.general/15855
www.openwall.com/lists/oss-security/2014/12/02/3
www.openwall.com/lists/oss-security/2014/12/04/17
www.securityfocus.com/bid/71420
bugzilla.mindrot.org/show_bug.cgi?id=1867
bugzilla.redhat.com/show_bug.cgi?id=1169843
exchange.xforce.ibmcloud.com/vulnerabilities/99090
Related
f5
f5
K16009 : OpenSSH vulnerability CVE-2014-9278
2015-01-22 00:00:00
SOL16009 - OpenSSH vulnerability CVE-2014-9278
2015-01-21 00:00:00
ubuntucve
ubuntucve
CVE-2014-9278
2014-12-06 00:00:00
debiancve
debiancve
CVE-2014-9278
2014-12-06 15:59:07
prion
prion
Authentication flaw
2014-12-06 15:59:00
nvd
nvd
CVE-2014-9278
2014-12-06 15:59:07
cve
cve
CVE-2014-9278
2014-12-06 15:59:07
fedora
fedora
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-15.fc21
2015-08-03 04:31:13
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-13.fc21
2015-07-10 19:09:25
openvas
openvas
Oracle: Security Advisory (ELSA-2015-0425)
2015-10-06 00:00:00
Fedora Update for openssh FEDORA-2015-12054
2015-08-11 00:00:00
Fedora Update for openssh FEDORA-2015-11067
2015-07-11 00:00:00
redhat
redhat
(RHSA-2015:0425) Moderate: openssh security, bug fix and enhancement update
2015-03-05 00:00:00
nessus
nessus
CentOS 7 : openssh (CESA-2015:0425)
2015-03-18 00:00:00
Oracle Linux 7 : openssh (ELSA-2015-0425)
2015-03-10 00:00:00
RHEL 7 : openssh (RHSA-2015:0425)
2015-03-05 00:00:00
oraclelinux
oraclelinux
openssh security, bug fix and enhancement update
2015-03-09 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2015-03-17 13:29:24
symantec
symantec
SA104 : OpenSSH Vulnerabilities
2015-12-08 08:00:00