DEBIAN-CVE-2005-2797

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding "-D" option when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality...

CVE-2005-2798

Technical details about CVE-2005-2798 are not publicly available in the provided connected documents. No product/version specifics, impact details, or fixes are enumerated here. Monitor for official updates from vendors or security advisories.

CVE-2005-2797

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding "-D" option when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality...

CVE-2005-2797

OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding "-D" option when a listen address is not provided, which may cause OpenSSH to enable the GatewayPorts functionality...

CVE-2005-2797

Vulnerability summary ( OpenSSH 4.0 and earlier than 4.2 ) OpenSSH 4.0 and older than 4.2 is affected by improper handling of dynamic port forwarding when no listen address is provided for the -D option, which may enable GatewayPorts. The connected OpenVAS entry aligns with this class of issue bu...

CVE-2005-2798

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts...

OpenSSH < 4.2p1 GSSAPI Authentication Credential Escalation

Binary data 3205.prm...

PT-2005-3678 · Openssh +2 · Openssh +2

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 4.2 Description: The issue allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods when GSSAPIDelegateCredentials is enabled. This could cause those credentials to be exposed to...

PT-2005-3677 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions 4.0 through 4.2 Description: The issue is related to the improper handling of dynamic port forwarding when a listen address is not provided, potentially causing OpenSSH to enable the GatewayPorts functionality. Recommendation...

Few OpenSSH vulnerabilities

GatewayPorts option can be incorrectly activated during dynamic port forwarding if no external interface is specified. If GSSAPIDelegateCredentials option is activated user who used different logon type can be delegated with GSSAPI credentials...

OpenSSH Two Security Issues

Secunia Advisory: SA16686 Release Date: 2005-09-02 Critical: Less critical Impact: Security Bypass Privilege escalation Where: From remote Solution Status: Vendor Patch Software: OpenSSH 3.x OpenSSH 4.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affectin...

CVE-2005-2666

Technical details for CVE-2005-2666 are not provided in the connected documents. The supplied sources reference OpenSSH issues unrelated to this CVE. Monitor for future disclosures to confirm affected versions and fixes.

CVE-2005-2666

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likel...

CVE-2005-2666

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the knownhosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likel...

CVE-2004-2414

Novell NetWare 6.5 SP 1.1 (Overlay CD installation/upgrade with OpenSSH, custom install) stores admin passwords in NIOUTPUT.TXT and NI.LOG during installation. Local users could access these log files and recover passwords, constituting an information-disclosure vulnerability. The vulnerability i...

CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...

CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged...

CVE-2001-1507

Technical details are not publicly available in the provided documents. Monitor for updates.

Slackware 8.1 / 9.0 / current : OpenSSH updated again (SSA:2003-260-01)

Upgraded OpenSSH 3.7.1p1 packages are available for Slackware 8.1, 9.0 and -current. These fix additional buffer management errors that were not corrected in the recent 3.7p1 release. The possibility exists that these errors could allow a remote exploit, so we recommend all sites running OpenSSH...

Slackware 8.1 / 9.0 / current : New OpenSSH packages (SSA:2003-266-01)

Upgraded OpenSSH 3.7.1p2 packages are available for Slackware 8.1, 9.0 and -current. This fixes security problems with PAM authentication. It also includes several code cleanups from Solar Designer. Slackware is not vulnerable to the PAM problem, and it is not believed that any of the other code...