OpenSSH 6.2 <= 6.3 Permissions, Privileges, and Access Controls Vulnerability

A memory corruption vulnerability exists in the post-authentication sshd process when an AES-GCM cipher [email protected] or [email protected] is selected during kex exchange. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, a...

OpenSSH < 5.1 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

OpenBSD OpenSSH is prone to hijack the X11 forwarding port vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

OpenSSH < 4.7 Improper Input Validation Vulnerability

ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted. Copyright C 2021 Greenbone Networks GmbH Some...

OpenSSH <= 5.6 Improper Authentication Vulnerability

OpenSSH 5.6 is prone to an authentication bypass vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free softwar...

OpenSSH < 3.7 Security Vulnerability

A Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of...

OpenSSH < 3.0.1 Security Vulnerability

OpenSSH version prior to 3.0.1 may allow an attacker to partially authenticate if -- and only if -- the administrator has enabled KerberosV. By default, OpenSSH KerberosV support only becomes active after KerberosV has been properly configured. Copyright C 2021 Greenbone Networks GmbH Some text...

OpenSSH 2.5 <= 2.9 Security Vulnerability

Versions of OpenSSH between 2.5.x - 2.9.x may fail to enforce the IP based access control restriction feature. A user may specify from which IP Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

OpenSSH 3.5p1 Configuration Vulnerability

sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by...

OpenSSH <= 2.9 Security Vulnerability

When OpenSSH is used in an environment using PAM, it may be possible for local users to evade restrictions enforced by PAM modules such as rlimits. A PAM session is not initiated by OpenSSH when commands are executed in an Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be...

OpenSSH <= 3.7.1p2 Security Vulnerability

OpenSSH is susceptible to a remote denial-of-service vulnerability. This issue is due to a design flaw when servicing timeouts related to the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

OpenSSH <= 4.2p1 Security Vulnerability

When performing local-to-local copying functions, scp expands shell characters in the filename twice before making a system call. A filename that contains specially crafted characters may cause arbitrary commands to be executed. If scp is used to transfer untrusted files or directories, a local...

OpenSSH 4.4 < 4.9 Permission, Privileges and Access Controls Vulnerability

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshdconfig ForceCommand directive by modifying the .ssh/rc session file. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

OpenSSH <= 3.6.1 Security Vulnerability

OpenSSH 3.6.1 and earlier when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled allows remote attackers to bypass Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...

OpenSSH < 4.7 Improper Authentication Vulnerabilities

OpenSSH is prone to multiple improper authentication vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenSSH 3.2.2 Security Vulnerability

A possible security issue for sshd in OpenBSD has been reported. A vulnerability related to the implementation of BSD authentication exists in sshd that may have security implications. In access configurations which use YP with netgroups, sshd will authenticate users via ACL by checking for the...

OpenSSH < 3.4p1 Path Traversal Vulnerability

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OpenSSH < 3.7.1 Security Vulnerability

All versions of OpenSSH Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify...

OpenSSH 4.0 < 4.2 Security Vulnerability

If no listen address is specified for dynamic port forwardings forwarding with the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Important Photon OS Security Update - PHSA-2021-0033

Updates of 'openssh', 'curl' packages of Photon OS have been released...

OpenSSH: Multiple vulnerabilities

Background OpenSSH is a complete SSH protocol implementation that includes SFTP client and server support. Description Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Impact A remote attacker, able to access the socket of t...