CVE-2016-10307

Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public but the cleartext value is perhaps not yet public. This account is accessible via SSH and/or TELNET, and...

CloudBees Jenkins SSH Slaves Plugin Security Bypass Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools . A security vulnerability in the CloudBees Jenkins SSH Slaves plugin allows remote attackers to submit special requests to bypass security restrictions and perform unauthorize...

SSH Configuration & Policy Scanner: ssh_scan

SSH Configuration & Policy Scanner SSH, or secure shell, is a secure protocol and the most common way of safely administering remote servers. Using a number of encryption technologies, SSH provides a mechanism for establishing a cryptographically secured connection between two parties,...

CVE-2017-3819

A privilege escalation vulnerability in the Secure Shell SSH subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The...

CVE-2017-3819

A privilege escalation vulnerability in the Secure Shell SSH subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The...

Cisco StarOS SSH Privilege Escalation Vulnerability

A privilege escalation vulnerability in the Secure Shell SSH subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attacker to gain unrestricted, root shell access. The...

UBUNTU-CVE-2016-7406

Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format string specifiers in the 1 username or 2 host argument...

DEBIAN-CVE-2016-7409

The dbclient and server in Dropbear SSH before 2016.74, when compiled with DEBUGTRACE, allows local users to read process memory via the -v argument, related to a failed remote ident...

The vulnerability of the ssh-agent agent in the OpenSSH encryption tool allows a hacker to execute arbitrary code.

The vulnerability of the ssh-agent agent in the OpenSSH encryption tool is related to insufficient checking of modules loaded based on the PKCS11 encryption standard. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2016-9347

CVE-2016-9347 affects Emerson DeltaV Wireless I/O Cards (WIOC) SE4801T0X Redundant and SE4801T1X Simplex, firmware v13.3, where SSH is enabled unnecessarily. Exploitation could be remote via an open SSH port. Emerson published a fix in NK-1500-0152 (hotfix DeltaV_133_WIOC_02_CSS) that disables th...

[SECURITY] Fedora 25 Update: openssh-7.4p1-1.fc25

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

ALPINE-CVE-2016-10012

The shared memory manager associated with pre-authentication compression in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to t...

OpenSSH Local Information Disclosure Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A local information disclosure vulnerability exists in OpenSSH. A local attacker could exploit the vulnerability to obtain sensitive information that could be...

CVE-2016-6474

A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on an affected system. More Information: CSCuv89417. Known Affected Releases: 15.52.25T. Known...

Core FTP LE- 'SSH/SFTP' Remote Buffer Overflow Vulnerability

Core FTP LE is a free FTP client. Core FTP LE- 'SSH/SFTP' suffers from a remote buffer overflow vulnerability. When connecting to a malicious server using the SSH / SFTP protocol. Allows remote attackers to exploit the vulnerability to execute arbitrary code or launch a denial of service attack...

kernel: ipv4: denial of service when destroying a network interface

A security flaw was found in the Linux kernel's networking subsystem that destroying the network interface with huge number of ipv4 addresses assigned keeps "rtnllock" spinlock for a very long time up to hour. This blocks many network-related operations, including creation of new incoming ssh...

The vulnerability of the SSH network protocol, related to the disclosure of information, allows a perpetrator to gain access to confidential data.

The vulnerability of the SSH network protocol is related to an error in password hashing. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

[SECURITY] Fedora 23 Update: openssh-7.2p2-6.fc23

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

Juniper Junos Space Man-in-the-Middle Attack Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A security vulnerability exists in Juniper Junos Space versions prior to 15.2R2, which aris...

Cisco NX-OS Security Bypass Vulnerability

Cisco NX-OS is a data center-oriented operating system from Cisco. A security bypass vulnerability exists in the SSH subsystem in Cisco NX-OS versions 4.0 through 7.3, which can be exploited by a remote attacker to bypass AAA restrictions and execute commands on the device command line...