New OpenSSH packages

Upgraded OpenSSH 3.7.1p2 packages are available for Slackware 8.1, 9.0 and -current. This fixes security problems with PAM authentication. It also includes several code cleanups from Solar Designer. Slackware is not vulnerable to the PAM problem, and it is not believed that any of the other code...

Multiple PAM vulnerabilities in portable OpenSSH

Subject: Portable OpenSSH Security Advisory: sshpam.adv This document can be found at: http://www.openssh.com/txt/sshpam.adv 1. Versions affected: Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple vulnerabilities in the new PAM code. At least one of these bugs is remotely exploitable...

OpenSSH PAM challenge authentication failure

Overview There is a vulnerability in the challenge authentication code of the Portable OpenSSH server when using the SSHv1 protocol and Pluggable Authentication Modules PAM. This vulnerability could permit a remote attacker to log in to the system as any user, including potentially root, without...

OpenSSH < 3.7.1p2 Multiple Remote Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH 3.7p1 or 3.7.1p1. These versions are vulnerable to a flaw in the way they handle PAM authentication when PrivilegeSeparation is disabled. Successful exploitation of this issue may allow an attacker to gain a shell on the remot...

Multiple OpenSSH PAM bugs

Multiple vulnerabilities...

DEBIAN-CVE-2003-0693

A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695...

CVE-2003-0693

A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695...

CVE-2003-0693

A "buffer management error" in bufferappendspace of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695...

[SECURITY] [DSA-383-2] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-383-2 [email protected] http://www.debian.org/security/ Wichert Akkerman September 21, 2003 - ------------------------------------------------------------------------ Package : ssh-krb5...

[SECURITY] [DSA-382-3] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-382-3 [email protected] http://www.debian.org/security/ Wichert Akkerman September 21, 2003 - ------------------------------------------------------------------------ Package : ssh...

CVE-2003-0695

OpenSSH prior to 3.7.1 contains multiple buffer management errors (in buffer_init/buffer_free and a separate channels.c function) that can allow a remote attacker to cause denial of service or potentially execute arbitrary code. The issue is associated with CVE-2003-0695; advisories indicate upgr...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

CVE-2003-0682

"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695...

CVE-2003-0695

Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using 1 bufferinit in buffer.c, 2 bufferfree in buffer.c, or 3 a separate function in channels.c, a different vulnerability than CVE-2003-0693...

CVE-2003-0682

CVE-2003-0682 is part of a set of OpenSSH memory/buffer handling bugs affecting OpenSSH 3.7.1 and earlier. Debian DSA advisories (DSA-382/383) tie CVE-2003-0682 to buffer handling vulnerabilities and recommend upgrading OpenSSH to address these issues; Slackware SSA 2003-266-01 notes OpenSSH 3.7....

SOL2773 - Multiple Open SSH vulnerabilities CA-2003-24, CA-2003-26, and CA-2003-26

CERT Vulnerability Note VU333628 details a buffer management problem in all versions of OpenSSH, prior to version 3.7.1, that may potentially be used by an attacker to gain unauthorized remote access. For information about this vulnerability, refer to...

[SECURITY] [DSA-383-1] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-383-1 [email protected] http://www.debian.org/security/ Wichert Akkerman September 17, 2003 - ------------------------------------------------------------------------ Package : ssh-krb5...

[SECURITY] [DSA-382-2] OpenSSH buffer management fix

------------------------------------------------------------------------ Debian Security Advisory DSA-382-2 [email protected] http://www.debian.org/security/ Wichert Akkerman September 17, 2003 - ------------------------------------------------------------------------ Package : ssh...

OpenSSH updated again

Upgraded OpenSSH 3.7.1p1 packages are available for Slackware 8.1, 9.0 and -current. These fix additional buffer management errors that were not corrected in the recent 3.7p1 release. The possibility exists that these errors could allow a remote exploit, so we recommend all sites running OpenSSH...