6535 matches found
OpenSSH < 3.4 Multiple Remote Overflows
According to its banner, the remote host appears to be running OpenSSH version 3.4 or older. Such versions are reportedly affected by multiple flaws. An attacker may exploit these vulnerabilities to gain a shell on the remote system. Note that several distributions patched this hole without...
[SECURITY] [DSA-134-1] OpenSSH remote vulnerability
Package : ssh Problem type : remote exploit Debian-specific: no Theo de Raadt announced that the OpenBSD team is working with ISS on a remote exploit for OpenSSH a free implementation of the Secure SHell protocol. They are refusing to provide any details on the vulnerability but instead are...
OpenSSH 3.x - Challenge-Response Buffer Overflow (1)
OpenSSH 3.x - Challenge-Response Buffer Overflow 1 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...
OpenSSH 3.x - Challenge-Response Buffer Overflow (1)
source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to the OpenSSH SSH2 challenge-response mechanism. They...
OpenSSH 3.x - Challenge-Response Buffer Overflow (2)
source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to the OpenSSH SSH2 challenge-response mechanism. They...
OpenSSH 3.x - Challenge-Response Buffer Overflow (2)
OpenSSH 3.x - Challenge-Response Buffer Overflow 2 source: https://www.securityfocus.com/bid/5093/info The OpenSSH team has reported two vulnerabilities in OpenSSH that are remotely exploitable and may allow for unauthenticated attackers to obtain root privileges. The conditions are related to th...
CVE-2002-0575
Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled, allows remote and local authenticated users to gain privileges...
PT-2002-1625 · Openssh +1 · Openssh +1
Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.9.9 OpenSSH versions 3.x prior to 3.2.1 Description: The issue allows remote and local authenticated users to gain privileges due to a buffer overflow. This occurs when Kerberos/AFS support and either...
PT-2002-1085
Name of the Vulnerable Software and Affected Versions OpenSSH versions through 8.7 Description The issue allows remote attackers to test whether a certain combination of username and public key is known to an SSH server. This occurs because a challenge is sent only when that combination could be...
OpenSSH Kerberos TGT/AFS Token Passing Remote Overflow
You are running a version of OpenSSH older than OpenSSH 3.2.1. A buffer overflow exists in the daemon if AFS is enabled on your system, or if the options KerberosTgtPassing or AFSTokenPassing are enabled. Even in this scenario, the vulnerability may be avoided by enabling UsePrivilegeSeparation...
OpenSSH Security Advisory (adv.token)
A buffer overflow exists in OpenSSH's sshd if sshd has been compiled with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing has been enabled in the sshdconfig file. Ticket and token passing is not enabled by default. 1. Systems affected: All Versions of OpenSSH compiled with...
Buffer overflow in OpenSSH
GETSTRING macro in radixtocreds function may cause buffer overflow...
OpenSSH 2.2.0 - 3.1.0 server contains a locally exploitable buffer overflow
effect: local root vulnerable services: -pass Kerberos IV TGT -pass AFS Token bug details: radix.c GETSTRING macro in radixtocreds function may cause buffer overflow. affected buffers: creds-service creds-instance creds-realm creds-pinst exploit code here: mantra.freeweb.hu...
OpenSSH 2.x/3.x - Kerberos 4 TGT/AFS Token Buffer Overflow
source: https://www.securityfocus.com/bid/4560/info A buffer overflow condition exists in the OpenSSH server. The condition is exploitable by attackers with valid user credentials in versions 2.9.9 and higher. Exploitation does not require valid user credentials in versions prior to 2.9.9. The...
OpenSSH 2.x3.x - Kerberos 4 TGTAFS Token Buffer Overflow
OpenSSH 2.x3.x - Kerberos 4 TGTAFS Token Buffer Overflow source: https://www.securityfocus.com/bid/4560/info A buffer overflow condition exists in the OpenSSH server. The condition is exploitable by attackers with valid user credentials in versions 2.9.9 and higher. Exploitation does not require...
CVE-2002-0083
Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges...
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges. Remediation There is no fixed version for openssh. References - Debian.org...
PT-2002-1073 · Red Hat +2 · Red Hat +2
Name of the Vulnerable Software and Affected Versions: OpenSSH versions 2.0 through 3.0.2 openssh-askpass-3.1p1 openssh-askpass-gnome-3.1p1 openssh-clients-3.1p1 openssh-server-3.1p1 openssh-3.1p1 Description: The issue is related to an off-by-one error in the channel code of OpenSSH, allowing...
