CVE-2012-0814

🗓️ 27 Jan 2012 19:00:00Reported by Debian Security Bug TrackerType

debiancve🔗 security-tracker.debian.org👁 28 Views

The auth_parse_options function in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: IBM System x and Flex Systems OpenSSH Vulnerabilities (CVE-2012-0814, CVE-2008-5161)	30 Jan 201908:05	–	ibm
Tenable Nessus	OpenSSH < 5.7 Multiple Vulnerabilities	1 Feb 201200:00	–	nessus
Tenable Nessus	GLSA-201405-06 : OpenSSH: Multiple vulnerabilities	12 May 201400:00	–	nessus
Tenable Nessus	OpenSSH < 5.7 Multiple Vulnerabilities	4 Oct 201100:00	–	nessus
Tenable Nessus	RHEL 6 : openssh (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	Oracle Solaris Third-Party Patch Update : ssh (cve_2010_5107_denial_of)	19 Jan 201500:00	–	nessus
Tenable Nessus	SuSE 11.1 Security Update : openssh (SAT Patch Number 6672)	25 Jan 201300:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : openssh (ZYPP Patch Number 8248)	28 Aug 201200:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2012-0814	4 Mar 202500:00	–	nessus
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	all	openssh	1:5.6p1-1	openssh_1:5.6p1-1_all.deb
Debian	12	all	openssh	1:5.6p1-1	openssh_1:5.6p1-1_all.deb
Debian	13	all	openssh	1:5.6p1-1	openssh_1:5.6p1-1_all.deb
Debian	14	all	openssh	1:5.6p1-1	openssh_1:5.6p1-1_all.deb
Debian	999	all	openssh	1:5.6p1-1	openssh_1:5.6p1-1_all.deb

27 Jan 2012 19:00Current

4.7Medium risk

Vulners AI Score4.7

CVSS 23.5

CVSS 3.16.5

EPSS0.03672

SSVC