6555 matches found
DSA-1576-1 openssh openssh-blacklist - predictable randomness
Bulletin has no description...
[USN-612-1] OpenSSL vulnerability
=========================================================== Ubuntu Security Notice USN-612-1 May 13, 2008 openssl vulnerability CVE-2008-0166 =========================================================== A weakness has been discovered in the random number generator used by OpenSSL on Debian and...
USN-612-2: OpenSSH vulnerability
A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...
USN-612-1: OpenSSL vulnerability
A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledg...
OpenSSH X连接会话劫持漏洞
BUGTRAQ ID: 28444 CVECAN ID: CVE-2008-1483 OpenSSH是一种开放源码的SSH协议的实现，初始版本用于OpenBSD平台，现在已经被移植到多种Unix/Linux类操作系统下。 在通过启用了X11转发的SSH登录时，sshd8没有正确地处理无法绑定到IPv4端口但成功绑定到IPv6端口的情况。在这种情况下，使用X11的设备即使没有被sshd8绑定也会连接到IPv4端口，因此无法安全的进行转发。 恶意用户可以在未使用的IPv4端口（如tcp...
FreeBSD-SA-08:05.openssh
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08:05.openssh Security Advisory The FreeBSD Project Topic: OpenSSH X11-forwarding privilege escalation Category: contrib Module: openssh Announced: 2008-04-17...
openSUSE 10 Security Update : openssh (openssh-5149)
A flaw in the X forwarding code of openssh allowed malicious users to steal the X access credentials of other users CVE-2008-1483. Due to another flaw users could bypass the option 'ForceCommand' CVE-2008-1657. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
openSUSE 10 Security Update : openssh (openssh-5148)
A flaw in the X forwarding code of openssh allowed malicious users to steal the X access credentials of other users CVE-2008-1483. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openssh-5148...
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 12.0 / 8.1 / 9.0 / 9.1 / current : openssh (SSA:2008-095-01)
New openssh packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory...
GLSA-200804-03 : OpenSSH: Privilege escalation
The remote host is affected by the vulnerability described in GLSA-200804-03 OpenSSH: Privilege escalation Two issues have been discovered in OpenSSH: Timo Juhani Lindfors discovered that OpenSSH sets the DISPLAY variable in SSH sessions using X11 forwarding even when it cannot bind the X11 serve...
SuSE 10 Security Update : OpenSSH (ZYPP Patch Number 5122)
A flaw in the X forwarding code of openssh allowed malicious users to steal the X access credentials of other users. CVE-2008-1483 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
OpenSSH: Privilege escalation
Background OpenSSH is a complete SSH protocol implementation that includes an SFTP client and server support. Description Two issues have been discovered in OpenSSH: Timo Juhani Lindfors discovered that OpenSSH sets the DISPLAY variable in SSH sessions using X11 forwarding even when it cannot bin...
[slackware-security] openssh
New openssh packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2008-1483 Here are the details from...
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : openssh vulnerability (USN-597-1)
Timo Juhani Lindfors discovered that the OpenSSH client, when port forwarding was requested, would listen on any available address family. A local attacker could exploit this flaw on systems with IPv6 enabled to hijack connections, including X11 forwards. Note that Tenable Network Security has...
OpenSSH < 5.0 X11 Forwarding Local Session Hijacking
Binary data 4459.prm...
OpenSSH X11 Forwarding Session Hijacking
According to its banner, the version of SSH installed on the remote host is older than 5.0. Such versions may allow a local user to hijack X11 sessions because it improperly binds TCP ports on the local IPv6 interface if the corresponding ports on the IPv4 interface are in use. C Tenable, Inc...
CVE-2008-1657
OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshdconfig ForceCommand directive by modifying the .ssh/rc session file...
CVE-2008-1657
OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshdconfig ForceCommand directive by modifying the .ssh/rc session file...
