CVE-2026-17491

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...

CVE-2026-17491 IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...

CVE-2026-17491

IBM i versions 7.3, 7.4, 7.5, and 7.6 (product 5733-SC1) are vulnerable to an improper privilege management flaw (CWE-269) in OpenSSH . The root cause is the improper enforcement of the ChrootDirectory configuration directive, which could allow a remote authenticated attacker to bypass security r...

EUVD-2026-103137

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...

CVE-2026-17491: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directive...

PT-2026-116138

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An improper privilege management issue in OpenSSH allows a remote authenticated attacker to bypass security restrictions. This occurs due to the improper enforcement of the ChrootDirectory configurati...

Security Bulletin: IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH [CVE-2026-17491]

Summary IBM i is vulnerable to bypassing security restrictions due to improper enforcement of ChrootDirectory CVE-2026-17491 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17491 DESCRIPTION: IBM i could allow a remote authenticated attacker to...

MiracleLinux 3 : openssh-4.3p2-29.3AXS3 (AXSA:2009-405:03)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-405:03 advisory. SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure...

EUVD-2009-2892

Malware in sbrugna...

SUSE CVE-2009-2904

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...

Linux: SSH Subsystem

Subsystem: Configures an external subsystem e.g. file transfer daemon. Arguments should be a subsystem name and a command with optional arguments to execute upon subsystem request. The command sftp-server implements the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be...

Privilege Escalation

openssh is vulnerable to privilege escalation. A Red Hat specific patch used in the openssh packages as shipped in Red Hat Enterprise Linux 5.4 RHSA-2009:1287 loosened certain ownership requirements for directories used as arguments for the ChrootDirectory configuration options. A malicious user...

F5 Networks BIG-IP : OpenSSH vulnerability (SOL15156)

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...

Scientific Linux Security Update : openssh on SL5.x i386/x86_64

A Red Hat specific patch used in the openssh packages as shipped in Red Hat Enterprise Linux 5.4 RHSA-2009:1287 loosened certain ownership requirements for directories used as arguments for the ChrootDirectory configuration options. A malicious user that also has or previously had non-chroot shel...

Red Hat Enterprise Linux OpenSSH ChrootDirectory Local Privilege Escalation

According to its banner, the version of OpenSSH running on the remote host may have a privilege escalation vulnerability. OpenSSH on Red Hat Enterprise Linux 5, Fedora 11, and possibly other platforms use an insecure implementation of the 'ChrootDirectory' configuration setting, which could allow...

CentOS Update for openssh CESA-2009:1470 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : openssh (CESA-2009:1470)

Updated openssh packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure Shell protocol implementation. These packages include the core...

CVE-2009-2904

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...

Design/Logic Flaw

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...

CVE-2009-2904

A certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in OpenSSH 4.3 in Red Hat Enterprise Linux RHEL 5.4 and Fedora 11, allows local users to gain privileges via hard links to setuid programs that use configuration files within the chroot directory, relate...