Lucene search
+L

6535 matches found

OpenVAS
OpenVAS
added 2017/12/10 12:0 a.m.41 views

Fedora Update for openssh FEDORA-2017-96d1995b70

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.9AI score0.03359EPSS
SaveExploits0References2
Photon
Photon
added 2017/12/08 12:0 a.m.58 views

Critical Photon OS Security Update - PHSA-2017-0091

Updates of 'openssh', 'linux', 'procmail', 'rsync', 'glibc', 'mongodb', 'linux-esx', 'binutils', 'python2', 'zookeeper' packages of Photon OS have been released...

7.8CVSS1.6AI score0.02084EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
added 2017/12/08 12:0 a.m.52 views

SUSE SLED12 / SLES12 Security Update : openssh (SUSE-SU-2017:3230-1)

This update for openssh fixes the following issues: Security issue fixed : - CVE-2017-15906: Stricter checking of operations in read-only mode in sftp server bsc1065000. Bug fixes : - FIPS: Startup selfchecks bsc1068310. - FIPS: Silent complaints about unsupported key exchange methods bsc1006166....

6.9CVSS6.4AI score0.03359EPSS
SaveExploits1References10
Photon
Photon
added 2017/12/07 12:0 a.m.52 views

Critical Photon OS Security Update - PHSA-2017-0005

Updates of 'linux-aws', 'linux-secure', 'rsync', 'linux-esx', 'openssh', 'libvirt', 'linux', 'procmail', 'python2' packages of Photon OS have been released...

7.2CVSS1.6AI score0.03359EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2017/12/04 12:0 a.m.32 views

Fedora Update for openssh FEDORA-2017-4862a3bfb1

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS5.9AI score0.03359EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/11/29 12:0 a.m.38 views

Fedora 26 : openssh (2017-4862a3bfb1)

Security fix for CVE-2017-15906: Improper write operations in readonly mode Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

5.3CVSS6.4AI score0.03359EPSS
SaveExploits0References2
Fedora
Fedora
added 2017/11/28 4:31 p.m.54 views

[SECURITY] Fedora 26 Update: openssh-7.5p1-4.fc26

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

5.3CVSS2AI score0.03359EPSS
SaveExploits0
IBM AIX
IBM AIX
added 2017/11/14 9:46 a.m.792 views

Vulnerabilities in OpenSSH affect AIX.

IBM SECURITY ADVISORY First Issued: Tue Nov 14 09:46:19 CST 2017 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory11.asc...

5.3CVSS6.4AI score0.03359EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/10/27 12:0 a.m.1820 views

OpenSSH < 7.6 'sftp-server' Security Bypass Vulnerability - Windows

OpenSSH is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

5.3CVSS5.8AI score0.03359EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2017/10/27 12:0 a.m.1968 views

OpenSSH < 7.6 'sftp-server' Security Bypass Vulnerability - Linux

OpenSSH is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

5.3CVSS5.8AI score0.03359EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2017/10/26 1:49 p.m.61 views

CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS4.8AI score0.03359EPSS
SaveExploits0References1
Prion
Prion
added 2017/10/26 3:29 a.m.208 views

Code injection

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5CVSS5.3AI score0.03359EPSS
SaveExploits0References9Affected Software12
OSV
OSV
added 2017/10/26 3:29 a.m.43 views

CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS4.8AI score
SaveExploits0References9
NVD
NVD
added 2017/10/26 3:29 a.m.24 views

CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS5.6AI score0.03359EPSS
SaveExploits0References9
OSV
OSV
added 2017/10/26 3:29 a.m.4 views

DEBIAN-CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS6.3AI score0.03359EPSS
SaveExploits0References1
OSV
OSV
added 2017/10/26 3:29 a.m.5 views

ALPINE-CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS7AI score0.03359EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2017/10/26 12:0 a.m.46 views

CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS6.6AI score0.03359EPSS
SaveExploits0
CVE
CVE
added 2017/10/26 12:0 a.m.10802 views

CVE-2017-15906

OpenSSH OpenSSH sftp-server.c contains a write-blocking flaw in readonly mode that can let an attacker create zero-length files. Specifically, the process_open function in sftp-server.c mishandles write operations when in read-only mode, affecting OpenSSH versions prior to 7.6. The vulnerability ...

5.3CVSS5.5AI score0.03359EPSS
SaveExploits0References9Affected Software1
AlpineLinux
AlpineLinux
added 2017/10/26 12:0 a.m.41 views

CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.3CVSS5.7AI score0.03359EPSS
SaveExploits0
Cvelist
Cvelist
added 2017/10/26 12:0 a.m.82 views

CVE-2017-15906

The processopen function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files...

5.5AI score0.03359EPSS
SaveExploits0References9
Rows per page
Query Builder