CVE-2000-0784: Undefined Security Weakness

sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh...

OpenSSH < 2.1.1 UseLogin Local Privilege Escalation

According to its banner, the remote host appears to be running OpenSSH version older than 2.1.1. Such versions are reportedly affected by a local privilege esclation vulnerability. If the UseLogin option is enabled, then sshd does not switch to the uid of the user logging in. Instead, sshd relies...

Лишний открытый порт в sshd из FreeBSD

Кроме порта TCP/22 прослушивается еще и порт TCP/722...

CVE-2000-0143

Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.

CVE-2000-0143: Undefined Security Weakness

The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP...

ssh.txt

Subject: remote DoS against inetd and ssh To: [email protected] Hi, At the beginning i'd like to excuse all of you if it is commonly well known hmm, i guess it is, but noone patched it ;. Both DoSs use something known as portfuck e.g. while true; do telnet host port & done. 1. If you use ...

sshd.install.risks.txt

Date: Mon, 10 May 1999 22:26:19 +0200 From: "GWDVMS::MOELLER" Subject: Risks of upgrading a UNIX system When was the last time you rebuilt all privileged suid root' applications when upgrading a unix system, just in case? I'm pretty sure one can find small print' that demands this, however I'm...

sshd-DoS.txt

Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Maybe some sshd 1.x/2.0 stupidities: ------------------------------------ Unprivledged luser could create symlink in /.ssh or /.sshd to virtually any fil...

CVE-1999-0248

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...

CVE-2023-38578

This CVE ID has been rejected by its Numbering Authority as unused and does not represent an active vulnerability.

CVE-2023-38578

...