Lucene search
+L

OpenSSH 'x11_open_helper()' Function Security Bypass Vulnerability

🗓️ 09 Jul 2015 00:00:00Reported by Copyright (C) 2015 Greenbone AGType 
openvas
 openvas
🔗 plugins.openvas.org👁 68 Views

OpenSSH 'x11_open_helper()' Function Security Bypass Vulnerability. Allows bypass of security restrictions and perform unauthorized action

Related
Refs
Code
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Open Source openssh affect IBM Security Identity Governance Appliance (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564 )
16 Jun 201821:46
ibm
ibm
IBM Security Bulletins
IBM Security Network Protection / IBM QRadar Network Security / XGS Technote Index
31 Jan 202100:10
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System Manager (FSM)
18 Jun 201801:34
ibm
ibm
IBM Security Bulletins
Security Bulletin: Openssh vulnerabilities affect IBM SmartClound Entry (CVE-2015-5352 CVE-2015-6563 CVE-2015-6564)
19 Jul 202000:49
ibm
ibm
IBM Security Bulletins
Security Bulletin: Multiple Security Vulnerabilities fixed in IBM Security Privileged Identity Manager
16 Jun 201821:45
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in ntp, libxml2, openssh, sqlite and python-base affect IBM BladeCenter Advanced Management Module (AMM)
14 Apr 202314:32
ibm
ibm
IBM Security Bulletins
Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available
16 Jun 201821:47
ibm
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in OpenSSH affect IBM Security Network Protection (CVE-2015-5352, CVE-2015-6563, and CVE-2015-6564)
16 Jun 201821:45
ibm
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in OpenSSH (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564)
16 Jun 201821:47
ibm
altlinux
ALT Linux
Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.4
8 Nov 201600:00
altlinux
Rows per page
SourceLink
securityfocuswww.securityfocus.com/bid/75525
# SPDX-FileCopyrightText: 2015 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.105317");
  script_cve_id("CVE-2015-5352");
  script_version("2025-01-17T15:39:18+0000");
  script_name("OpenSSH 'x11_open_helper()' Function Security Bypass Vulnerability");
  script_tag(name:"cvss_base", value:"4.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:N/I:P/A:N");
  script_tag(name:"last_modification", value:"2025-01-17 15:39:18 +0000 (Fri, 17 Jan 2025)");
  script_tag(name:"creation_date", value:"2015-07-09 10:06:32 +0200 (Thu, 09 Jul 2015)");
  script_category(ACT_GATHER_INFO);
  script_family("General");
  script_copyright("Copyright (C) 2015 Greenbone AG");

  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/75525");

  script_tag(name:"impact", value:"An attacker can exploit this issue to bypass certain security
  restrictions and perform unauthorized actions. This may lead to further attacks");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"solution", value:"Update to 6.9 or newer.");

  script_tag(name:"summary", value:"OpenSSH is prone to a security bypass vulnerability.

  This VT has been deprecated and replaced by the VT with the OID: 1.3.6.1.4.1.25623.1.0.806049.");

  script_tag(name:"affected", value:"OpenSSH < 6.9");

  script_tag(name:"qod_type", value:"remote_banner_unreliable");
  script_tag(name:"solution_type", value:"VendorFix");

  script_tag(name:"deprecated", value:TRUE);

  exit(0);
}

exit(66); # Replaced by gb_openssh_security_bypass_vuln.nasl (1.3.6.1.4.1.25623.1.0.806049)

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jan 2025 00:00Current
6.9Medium risk
Vulners AI Score6.9
CVSS 24.3
EPSS0.05445
68