PT-2001-1205 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.3.0 Description: The issue allows a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent, due to improper disabling of X11 or agent forwarding in the OpenSSH...

[SECURITY] New version of openssh released

Package : openssh Problem type : remote exploit Debian-specific: no The adv.fwd security advisory from OpenBSD reported a problem with openssh that Jacob Langseth [email protected] found: when the connection is established the remote ssh server can force the ssh client to enable agent and X11...

[SECURITY] New version of openssh released

------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Wichert Akkerman November 18, 2000 - ------------------------------------------------------------------------ Package : openssh Problem type :...

openssh.forwarding.txt

Hostile servers can force OpenSSH clients to do agent or X11 forwarding 1. Systems affected: All versions of OpenSSH prior to 2.3.0 are affected. 2. Description: If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup...

OpenSSH Security Advisory (adv.fwd)

Hostile servers can force OpenSSH clients to do agent or X11 forwarding 1. Systems affected: All versions of OpenSSH prior to 2.3.0 are affected. 2. Description: If agent or X11 forwarding is disabled in the ssh client configuration, the client does not request these features during session setup...

Дырка в OpenSSH-клиенте (X11-forwarding)

Сервер может затребовать передачу X11-сообщений, таким образом перезватывать все события в сеансе клиента...

CVE-2000-0525

CVE-2000-0525: OpenSSH does not properly drop privileges when UseLogin is enabled, allowing local users to execute arbitrary commands by supplying the command to the ssh daemon. Affected: OpenSSH with UseLogin enabled. Root cause: privileges not dropped correctly after authentication. Impact: pot...

CVE-2000-0525

OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon...

MDKSA-2000:057 - openssh update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Linux-Mandrake Security Update Advisory Package name: openssh Date: October 10th, 2000 Advisory ID: MDKSA-2000:057 Affected versions: 7.0, 7.1 Problem Description: A problem exists with openssh's scp program. If a user uses scp to move files from a...

Проблемы с SCP в OpenSSH

Со стороны сервера можно контролировать размещение файлов на компьютере клиента...

OpenSSH 1.2 - .scp File CreateOverwrite

OpenSSH 1.2 - .scp File CreateOverwrite source: https://www.securityfocus.com/bid/1742/info A vulnerability exists in the 1.2.x releases of scp which, if properly exploited using a modified scp binary on the server end, can permit the remote server to spoof local pathnames and overwrite files...

OpenSSH 1.2 - '.scp' File Create/Overwrite

source: https://www.securityfocus.com/bid/1742/info A vulnerability exists in the 1.2.x releases of scp which, if properly exploited using a modified scp binary on the server end, can permit the remote server to spoof local pathnames and overwrite files belonging to the local user. For example,...

Linux news 5.09.00

Linux 2.2.17 Вышло новое ядро из стабильной серии - 2.2.17 Подробнее: http://www.linux.org.uk/VERSION/relnotes.2217.html Linux 2.2.18pre3 Alan Cox выпустил 1-ю pre-версию "после-следующего" стабильного ядра Linux - 2.2.18. Работа над следующим стабильным ядром Linux, 2.2.17, закончилась на pre20,...

CVE-2000-0535

OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken...

CVE-2000-0535

CVE-2000-0535 affects OpenSSL 0.9.4 and OpenSSH on FreeBSD, where FreeBSD Alpha's missing /dev/random or /dev/urandom leads to weak cryptographic keys. The issue arises from improper device checks, resulting in keys that may be easier to break. The provided documents describe the root cause and a...

FreeBSD-SA-00:30.openssh

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:30 Security Advisory FreeBSD, Inc. Topic: OpenSSH UseLogin directive permits remote root access Category: core Module: openssh Announced: 2000-07-05 Credits: Markus Fried...

Linux news 13.06.00

-=FOR ALL=- Извините за столь долгое молчание. Решил устроить себе маааленький отпуск на недельку Linux 2.2.16 Вышло очередное ядро из стабильной серии. Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/v2.2/ Исправления для 2.2.16 Для тех, кто испытывает проблемы с ядром 2.2.16, Alan Cox выпустил...

FreeBSD-SA-00:25.alpha-random

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:25 Security Advisory FreeBSD, Inc. Topic: FreeBSD/Alpha platform lacks kernel pseudo-random number generator, some applications fail to detect this. Category: core Module...

OpenSSH's UseLogin option allows remote access with root privilege.

OpenSSH's UseLogin option allows remote access with root privilege. 1. Systems affected: The default installation of OpenSSH is not vulnerable, since UseLogin defaults to 'no'. However, if UseLogin is enabled, all versions of OpenSSH prior to 2.1.1 are affected. 2. Description: If the UseLogin...

Уязвимость USELOGIN в OpenSSH

При использовании опции USELOGIN внешяя програма логин используется для авторизации пользователя и установки корректных разрешений. В то же время при запросе пользователем сервиса без входа например rsh login не срабатывает и пользователь работает с привилегией root...