PT-2017-3186 · Openssh +6 · Openssh +6

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 7.6 Description: The issue is related to the process open function in sftp-server.c, which does not properly prevent write operations when in readonly mode. This allows attackers to create zero-length files,...

macOS 10.12.x < 10.12.4 Multiple Vulnerabilities (httpoxy)

The remote host is running a version of macOS that is 10.12.x prior to 10.12.4. It is, therefore, affected by multiple vulnerabilities in multiple components, some of which are remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these remote code execution...

Oracle Linux 6 : openssh (ELSA-2017-0641)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-0641 advisory. - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 Tenable has extracted the preceding description block directly from th...

Apple Fixes 223 Vulnerabilities Across macOS, iOS, Safari

Apple fixed hundreds of bugs, 223 to be exact, across a slate of products including macOS Sierra, iOS, Safari, watchOS, and tvOS on Monday. More than a quarter of the bugs, 40 in macOS Sierra, and 30 in iOS, could lead to arbitrary code execution – in some instances with root privileges, Apple...

Dropbear SSH < 2016.74.0 Multiple Vulnerabilities

Binary data 700028.prm...

openssh security and bug fix update

5.3p1-122 - Allow to use ibmca crypto hardware 1397547 - CVE-2015-8325: privilege escalation via user's PAM environment and UseLogin=yes 1405374 5.3p1-121 - Fix missing hmac-md5-96 from server offer 1373836 5.3p1-120 - Prevent infinite loop when Ctrl+Z pressed at password prompt 1218424 - Remove...

CentOS 6 : openssh (CESA-2017:0641)

An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2017:0641 An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

OpenSSH on Cygwin: directory traversal in SFTP client

Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can also be used for directory traversal. To reproduce: On the server:...

RedHat Update for openssh RHSA-2017:0641-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenSSH 7.x < 7.5 Directory Traversal

Binary data 700019.prm...

OpenSSH On Cygwin SFTP Client Directory Traversal Vulnerability

Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can a lso be used for directory traversal. OpenSSH on Cygwin: directory...

OpenSSH On Cygwin SFTP Client Directory Traversal

OpenSSH on Cygwin: directory traversal in SFTP client Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can also be used fo...

RHEL 6 : openssh (RHSA-2017:0641)

An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

openssh: privilege escalation via user's PAM environment and UseLogin=yes

It was discovered that the OpenSSH sshd daemon fetched PAM environment settings before running the login program. In configurations with UseLogin=yes and the pamenv PAM module configured to read user environment settings, a local user could use this flaw to execute arbitrary code as root...

Moderate: Red Hat Security Advisory: openssh security and bug fix update

An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

openSUSE Security Update : openssh (openSUSE-2017-339)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE SLES12 Security Update : openssh (SUSE-SU-2017:0607-3)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE SLED12 Security Update : openssh (SUSE-SU-2017:0607-2)

This update for openssh fixes the following issues : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks of host private keys to...

SUSE SLES11 Security Update : openssh (SUSE-SU-2017:0606-1)

This update for openssh fixes the following issues: Security issues fixed : - CVE-2016-8858: prevent resource depletion during key exchange bsc1005480 - CVE-2016-10009: limit directories for loading PKCS11 modules to avoid privilege escalation bsc1016366 - CVE-2016-10011: Prevent possible leaks o...