SOL15557 - OpenSSH vulnerability CVE-2011-4327

Recommended Action None Supplemental Information SOL9970: Subscribing to email notifications regarding F5 products SOL9957: Creating a custom RSS feed to view new and updated documents. SOL4602: Overview of the F5 security vulnerability response policy SOL4918: Overview of the F5 critical issue...

CVE-2011-4327

The ssh-keysign.c file in OpenSSH before version 5.8p2 on certain platforms is vulnerable to an issue where it executes ssh-rand-helper with unintended open file descriptors. This flaw allows local users to obtain sensitive key information by utilizing the ptrace system call. No specific exploit ...

CVE-2011-4327

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call...