Authorization Bypass

openssh is vulnerable to authorization bypass attacks. The vulnerability exists as sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshdconfig, which allows remote attackers to bypass intended environment restrictions by using a substring located before a...