Privilege Escalation

openssh is vulnerable to privilege escalation. A use-after-free flaw allows an attacker to fully compromise a non-privileged pre-authentication process using a different flaw could possibly cause sshd to crash or execute arbitrary code with root privileges...

SUSE-SU-2019:14030-1 Security update for openssh

This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816. -...

SUSE-SU-2019:0941-1 Security update for openssh

This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816. -...

SUSE-SU-2019:14016-1 Security update for openssh

This update for openssh fixes the following issues: Security vulnerabilities addressed: - CVE-2019-6109: Fixed an character encoding issue in the progress display of the scp client that could be used to manipulate client output, allowing for spoofing during file transfers bsc1121816. -...

OpenSSH sshd Username Information Disclosure (CVE-2018-15473)

An information disclosure vulnerability exists in OpenSSH. The vulnerability is due to the different ways in which the sshd daemon responds to crafted SSH packets. A successful attack can result in the attacker being able to determine whether a user exists on the system...

CVE-2018-0044

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

CVE-2018-0044

An insecure SSHD configuration (PermitEmptyPasswords = yes) in Juniper Device Manager and the host OS on Juniper NFX Series devices allows remote unauthenticated access if any passwords are empty. Affected: Junos OS 18.1 versions prior to 18.1R4 on NFX Series. Root cause: SSHD permitting empty pa...

CVE-2018-0044: Improper Authentication

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

Collectric CMU 1.0 - lang Hard-Coded Credentials SQL injection

Collectric CMU 1.0 - lang Hard-Coded Credentials SQL injection Exploit Title: Collectric CMU 1.0 - 'lang' SQL injection Google Dork: "Inloggning Collectric CMU" Discoverer: Simon Brannstrom Date: 2018-09-15 Vendor Homepage: http://ourenergy.se/ Software Link: n/a Version: All known versions Teste...

Arbitrary File Read And Write

org.apache.karaf.shell.core is vulnerable to arbitrary file read and write. A user with rights to the Karaf console is able to read or write any file on the file system, which would allow an attacker with access to the sshd service to abuse the vulnerability to read or write arbitrary files on th...

CVE-2018-11786

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

CVE-2018-11786

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

CVE-2018-11786: Improper Privilege Management

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

PT-2018-10820

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 4.2.0 Description The issue allows any user with rights to the Karaf console to read and write files on the file system that the Karaf process user has access to, if the sshd service is enabled. This can be...

EulerOS 2.0 SP1 : openssh (EulerOS-SA-2018-1068)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via an out-of-sequence...

Solaris 10 (sparc) : 148104-26

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Feb/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 123325-03

SunOS 5.10x86: sshd patch. Date this patch was last updated by Sun : Jun/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (x86) : 148105-23

SunOS 5.10x86: last, ssh/sshd patch. Date this patch was last updated by Sun : Jun/09/16 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 10 (sparc) : 148104-21

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Nov/12/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 10 (sparc) : 148104-11

SunOS 5.10: last, ssh/sshd patch. Date this patch was last updated by Sun : Jul/11/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...