6535 matches found
Fedora 23 : openssh-7.2p2-3.fc23 (2016-7f5004093e)
Security fix for CVE-2015-8325: ignore PAM environment vars when UseLogin=yes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...
[SECURITY] Fedora 23 Update: openssh-7.2p2-3.fc23
SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...
OpenSSH < 7.1 PermitRootLogin Bypass Vulnerability
Binary data 9310.prm...
OpenSSH < 6.9 Multiple Vulnerabilities
Binary data 9308.prm...
OpenSSH < 7.0 Multiple Vulnerabilities
Binary data 9309.prm...
OpenSSH < 7.2 X11Forwarding Fallback Bypass Vulnerability
Binary data 9311.prm...
OpenSSH < 7.2p2 X11Forwarding xauth Command Injection
Binary data 9312.prm...
Ubuntu 16.04 LTS (Xenial Xerus) - The leading OS for PC, tablet, phone and cloud
Ubuntu is an ancient African word meaning ‘humanity to others’. It also means ‘I am what I am because of who we all are’. The Ubuntu operating system brings the spirit of Ubuntu to the world of computers. Where did it all begin? Linux was already established as an enterprise server platform in...
OpenSSH UseLogin Environment Variable Arbitrary Code Execution Vulnerability
OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. An arbitrary code execution vulnerability exists in OpenSSH, which can be exploited by a local attacker to bypass certain security restrictions, download...
Debian DSA-3550-1 : openssh - security update
Shayan Sadigh discovered a vulnerability in OpenSSH: If PAM support is enabled and the sshd PAM configuration is configured to read userspecified environment variables and the 'UseLogin' option is enabled, a local user may escalate her privileges to root. In Debian 'UseLogin' is not enabled by...
[SECURITY] [DSA 3550-1] openssh security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3550-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2016 https://www.debian.org/security/faq -...
DSA-3550-1 openssh - security update
Bulletin has no description...
Debian Security Advisory DSA 3550-1 (openssh - security update)
Shayan Sadigh discovered a vulnerability in OpenSSH: If PAM support is enabled and the sshd PAM configuration is configured to read userspecified environment variables and the UseLogin option is enabled, a local user may escalate her privileges to root. In Debian UseLogin is not enabled by defaul...
Debian: Security Advisory (DSA-3550-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-1235
The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...
DEBIAN-CVE-2016-1235
The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...
CVE-2016-1235
The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...
Open redirect
The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...