OpenSSH UseLogin Environment Variable Arbitrary Code Execution Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. An arbitrary code execution vulnerability exists in OpenSSH, which can be exploited by a local attacker to bypass certain security restrictions, download...

Debian DSA-3550-1 : openssh - security update

Shayan Sadigh discovered a vulnerability in OpenSSH: If PAM support is enabled and the sshd PAM configuration is configured to read userspecified environment variables and the 'UseLogin' option is enabled, a local user may escalate her privileges to root. In Debian 'UseLogin' is not enabled by...

[SECURITY] [DSA 3550-1] openssh security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3550-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 15, 2016 https://www.debian.org/security/faq -...

DSA-3550-1 openssh - security update

Bulletin has no description...

Debian Security Advisory DSA 3550-1 (openssh - security update)

Shayan Sadigh discovered a vulnerability in OpenSSH: If PAM support is enabled and the sshd PAM configuration is configured to read userspecified environment variables and the UseLogin option is enabled, a local user may escalate her privileges to root. In Debian UseLogin is not enabled by defaul...

Debian: Security Advisory (DSA-3550-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

DEBIAN-CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

Open redirect

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

UBUNTU-CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options...

CVE-2016-1235

CVE-2016-1235 affects the OAR workload manager prior to 2.5.7 through its oarsh script. The vulnerability allows remote authenticated users within a cluster to access sensitive information and potentially escalate privileges via issues related to OpenSSH options. Affected component: oarsh in OAR ...

Fedora Update for openssh FEDORA-2016-0

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerabilities of the OpenSSH cryptographic protection mechanism, which allow attackers to circumvent command interpreter restrictions

The multiple vulnerabilities of the session.c sshd function in the OpenSSH cryptographic security mechanism exist due to the failure to address the issue of handling CRLF sequences carriage return followed by line feed. Exploiting these vulnerabilities allows a malicious actor to bypass command...

Oracle: Security Advisory (ELSA-2016-3531)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : openssh (ELSA-2016-3531)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-3531 advisory. - CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices John Haxby orabug 22985024 Tenable has extracted the preceding...

openssh security update

4.3p2-82.0.2 - CVE-2015-5600: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices John Haxby orabug 22985024 - CVE-2016-3115: missing sanitisation of input for X11 forwarding John Haxby orabug 22985024...