CVE-2012-0814

The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...

OpenSSH < 2.1.1p3 Format String Privilege Escalation

According to the banner, a version of OpenSSH earlier than 2.1.1p3 is running on the remote host. As such, it is reportedly affected by a format string vulnerability. C Tenable, Inc. include"compat.inc"; if description scriptid17839; scriptversion"1.4";...

[SECURITY] Fedora 16 Update: krb5-appl-1.0.2-2.fc16

This package contains Kerberos-aware versions of the telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as OpenSSH in most environments, they remain in use in others...

[SECURITY] Fedora 15 Update: krb5-appl-1.0.1-8.fc15

This package contains Kerberos-aware versions of the telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as OpenSSH in most environments, they remain in use in others...

OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

The host is running OpenSSH sshd with ChallengeResponseAuthentication enabled and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsshdchallengerespauthenticationbofvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ OpenSSH 'sshd' Challenge Response Authentication Buffer...

OpenSSH 'sshd' Challenge Response Authentication Buffer Overflow Vulnerability

OpenSSH sshd with ChallengeResponseAuthentication enabled is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

OpenSSH >= 2.3.0 AllowTcpForwarding Port Bouncing

According to its banner, the remote host is running OpenSSH, version 2.3.0 or later. Such versions of OpenSSH allow forwarding TCP connections. If the OpenSSH server is configured to allow anonymous connections e.g. AnonCVS, remote, unauthenticated users could use the host as a proxy. C Tenable,...

OpenSSH S/KEY Authentication Account Enumeration

When OpenSSH has S/KEY authentication enabled, it is possible to remotely determine if an account configured for S/KEY authentication exists. Note that Nessus has not attempted to exploit the issue but has instead only checked if OpenSSH is running on the remote host. As a result, it will not...

OpenSSH < 3.6.1p2 Multiple Vulnerabilities

According to its banner, the version of OpenSSH running on the remote host is ealier than 3.6.1p2. When compiled for the AIX operating system with a compiler other than that of the native AIX compiler, an error exists that can allow dynamic libraries in the current directory to be loaded before...

OPIE w/ OpenSSH Account Enumeration

When using OPIE for PAM and OpenSSH, it is possible for remote attackers to determine the existence of certain user accounts. Note that Nessus has not tried to exploit the issue, but rather only checked if OpenSSH is running on the remote host. As a result, it does not detect if the remote host...

OpenSSH < 1.2.2 sshd Local TCP Redirection Connection Masking Weakness

According to its banner, the version of OpenSSH running on the remote host allows local users without shell access to redirect TCP connections with the IDENT 'root@localhost'. A local attacker could use this incorrect IDENT to bypass monitoring/logging. C Tenable, Inc. include"compat.inc"; if...

OpenSSH < 2.1.0 /dev/random Check Failure

According to its banner, the version of OpenSSH running on the remote host is less than 2.1.0. On a FreeBSD system running on the Alpha architecture, versions earlier than that may not use the /dev/random and /dev/urandom devices to provide a strong source of cryptographic entropy, which could le...

Red Hat Enterprise Linux OpenSSH ChrootDirectory Local Privilege Escalation

According to its banner, the version of OpenSSH running on the remote host may have a privilege escalation vulnerability. OpenSSH on Red Hat Enterprise Linux 5, Fedora 11, and possibly other platforms use an insecure implementation of the 'ChrootDirectory' configuration setting, which could allow...

OpenSSH < 3.4p1 scp Traversal Arbitrary File Overwrite

According to its banner, the version of OpenSSH running on the remote host is earlier than version 3.4p1. Such versions contain an arbitrary file overwrite vulnerability that could allow a malicious SSH server to cause the supplied scp utility to write to arbitrary files outside of the current...

OpenSSH < 5.9 Multiple DoS

According to its banner, the version of OpenSSH running on the remote host is prior to version 5.9. Such versions are affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the gss-serv.c 'sshgssapiparseename' function. A remote attacker may be able...

OpenSSH 'sshd' GSSAPI Credential Disclosure Vulnerability

The host is running OpenSSH sshd with GSSAPI enabled and is prone to credential disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsshdgssapicredentialdisclosurevuln.nasl 7029 2017-08-31 11:51:40Z teissa $ OpenSSH 'sshd' GSSAPI Credential Disclosure Vulnerability Authors: Antu Sanadi...

OpenSSH 'sshd' GSSAPI Credential Disclosure Vulnerability

OpenSSH sshd with GSSAPI enabled is prone to credential disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The default password may cause iPhone users to information disclosure-vulnerability warning-the black bar safety net

Author: Vic iPhone root the default password is not a secret, just GOOGLE it you can know the Root and mobile account password is: alpine The vast majority of domestic users to buy the IPHONE after the first time is the film, then is jailbreak? jailbreak is to be able to use more apps, games,...

Multi Gather OpenSSH PKI Credentials Collection

This module will collect the contents of all users' .ssh directories on the targeted machine. Additionally, knownhosts and authorizedkeys and any other files are also downloaded. This module is largely based on firefoxcreds.rb. This module requires Metasploit: https://metasploit.com/download...

CVE-2011-2390

The default value of "StrictHostKeyChecking=no" has been used for kdump/ mkdumprd openssh integration. A remote malicious kdump server could use this flaw to impersonate the intended, correct kdump server to obtain security sensitive information kdump core files...