84 matches found
CVE-2016-6564
CVE-2016-6564 concerns Ragentek Android firmware that embeds a privileged OTA update binary (/system/bin/debugs) which communicates with three HTTP hosts over an unencrypted channel. The rootkit-like binary runs with root privileges and can execute arbitrary root commands in responses from the se...
Security Bulletin: Vulnerabilities in OpenSSH affect the IBM FlashSystem model V840
Summary There are vulnerabilities in OpenSSH to which the IBM® FlashSystem™ V840 is susceptible. An exploit of these vulnerabilities CVE-2015-6563 and CVE-2015-6564 could allow a remote attacker to bypass security restrictions to gain elevated privileges or conduct an impersonation attack...
Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available
Summary There are multiple security vulnerabilities in various components used by IBM Security Identity Manager Virtual Appliance Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when...
Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in OpenSSH (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564)
Summary Vulnerabilities have been identified in OpenSSH. IBM Security Access Manager appliances use OpenSSH and are affected by these vulnerabilities. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, cause...
Security Bulletin: Vulnerabilities in Open Source openssh affect IBM Security Identity Governance Appliance (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564 )
Summary IBM Security Identity Governance 5.2.1 appliances are affected by a vulnerability in openssh. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when making connections after...
Security Bulletin: Vulnerabilities in OpenSSH affect IBM Security Network Protection (CVE-2015-5352, CVE-2015-6563, and CVE-2015-6564)
Summary Security vulnerabilities have been discovered in OpenSSH, which is used by IBM Security Network Protection. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when making connectio...
CVE-2013-6564
CVE-2013-6564 is rejected/not used; the entry does not represent an active vulnerability.
CVE-2017-6564
The CVE-2017-6564 vulnerability affects Franklin Fueling Systems TS-550 evo version 2.3.0.7332. The Guest user (lowest privileges) can post to the idSourceFileName parameter under the /download directory, enabling download of sensitive system files such as databases. This is an information disclo...
Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.4
6.7p1-alt1.M60P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172047 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...
Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.4
6.7p1-alt1.M70P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172046 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...
Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20160510)
Security Fixes : - It was found that the OpenSSH client did not properly enforce the ForwardX11Timeout setting. A malicious or compromised remote X application could possibly use this flaw to establish a trusted connection to the local X server, even if only untrusted X11 forwarding was requested...
F5 Networks BIG-IP : OpenSSH vulnerabilities (K17263)
CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITORREQPAMINITCTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to...
openssh, pam_ssh_agent_auth security update
CentOS Errata and Security Advisory CESA-2016:0741 An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
RedHat Update for openssh RHSA-2016:0741-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 201512-04
Gentoo Linux Local Security Checks GLSA 201512-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
Medium: openssh
Issue Overview: A flaw was found in the way OpenSSH handled PAM authentication when using privilege separation. An attacker with valid credentials on the system and able to fully compromise a non-privileged pre-authentication process using a different flaw could use this flaw to authenticate as...
Oracle: Security Advisory (ELSA-2015-2088)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AIX OpenSSH Vulnerability
IBM SECURITY ADVISORY First Issued: Wed Oct 21 09:17:40 CDT 2015 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory6.asc...
SUSE SLED11 / SLES11 Security Update : openssh (SUSE-SU-2015:1695-1) (Logjam)
OpenSSH was updated to fix several security issues and bugs. Please note that due to a bug in the previous shipped openssh version, sshd might not correctly restart. Please verify that the ssh daemon is running after installing this update. These security issues were fixed : - CVE-2015-5352: The...