PT-2006-1032 · Openssh +4 · Openssh-Clients +8

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 4.4 OpenSSH version 3.1p1 openssh-askpass versions prior to 4.3 p2-r5 openssh-askpass-gnome version 3.1p1 openssh-clients version 3.1p1 openssh-server version 3.1p1 Description: The issue concerns multiple...

Debian DSA-134-4 : ssh - remote exploit

ISS X-Force released an advisory about an OpenSSH 'Remote Challenge Vulnerability'. Unfortunately, the advisory was incorrect on some points, leading to widespread confusion about the impact of this vulnerability. No version of OpenSSH in Debian is affected by the SKEY and BSDAUTH authentication...

Debian DSA-382-3 : ssh - possible remote vulnerability

A bug has been found in OpenSSH's buffer handling where a buffer could be marked as grown when the actual reallocation failed. DSA-382-2: This advisory is an addition to the earlier DSA-382-1 advisory: two more buffer handling problems have been found in addition to the one described in DSA-382-1...

OpenSSH < 3.0.2 UseLogin Environment Variable Local Command Execution

Binary data 1992.prm...

Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities

Binary data 1996.prm...

OpenSSH < 3.0.1 Multiple Vulnerabilities

Binary data 1986.prm...

Mandrake Linux Security Advisory : openssh (MDKSA-2002:040-1)

An input validation error exists in the OpenSSH server between versions 2.3.1 and 3.3 that can result in an integer overflow and privilege escalation. This error is found in the PAMAuthenticationViaKbdInt code in versions 2.3.1 to 3.3, and the ChallengeResponseAuthentication code in versions 2.9....

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

OpenSSH < 3.7.1p2 Multiple Remote Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH 3.7p1 or 3.7.1p1. These versions are vulnerable to a flaw in the way they handle PAM authentication when PrivilegeSeparation is disabled. Successful exploitation of this issue may allow an attacker to gain a shell on the remot...

Multiple OpenSSH PAM bugs

Multiple vulnerabilities...

Multiple PAM vulnerabilities in portable OpenSSH

Subject: Portable OpenSSH Security Advisory: sshpam.adv This document can be found at: http://www.openssh.com/txt/sshpam.adv 1. Versions affected: Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple vulnerabilities in the new PAM code. At least one of these bugs is remotely exploitable...

[SECURITY] [DSA-382-3] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-382-3 [email protected] http://www.debian.org/security/ Wichert Akkerman September 21, 2003 - ------------------------------------------------------------------------ Package : ssh...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

SOL2773 - Multiple Open SSH vulnerabilities CA-2003-24, CA-2003-26, and CA-2003-26

CERT Vulnerability Note VU333628 details a buffer management problem in all versions of OpenSSH, prior to version 3.7.1, that may potentially be used by an attacker to gain unauthorized remote access. For information about this vulnerability, refer to...

[SECURITY] [DSA-382-2] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-382-2 [email protected] http://www.debian.org/security/ Wichert Akkerman September 17, 2003 - ------------------------------------------------------------------------ Package : ssh...