Cisco ASR 5000 Series StarOS SSH Subsystem Privilege Escalation (CSCux22492)

The remote Cisco ASR 5000 Series device is affected by a privilege escalation vulnerability in the SSH subsystem due to improper handling of multi-user public-key authentication. An authenticated, remote attacker can exploit this, by establishing a connection from an endpoint that was previously...

CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previous...

CVE-2016-1335

The CVE concerns Cisco StarOS on ASR 5000 devices (StarOS before 19.3.M0.62771 and before 20.0.M0.62768 in 20.x) where the SSH subsystem mishandles multi-user public-key authentication. An authenticated remote user can escalate privileges by connecting from an endpoint previously used by an admin...