OpenSSH < 2.3.2 SSHv2 Public Key Authentication Bypass

Binary data 1985.prm...

OpenSSH < 2.9.9 Multiple Key Type ACL Bypass

Binary data 1988.prm...

OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow

Binary data 1989.prm...

Portable OpenSSH < 3.7.1p2 Multiple PAM Vulnerabilities

Binary data 1996.prm...

OpenSSH Detection

Binary data 1997.prm...

OpenSSH < 3.0.1 Multiple Vulnerabilities

Binary data 1986.prm...

OpenSSH Client < 2.3.0 X11 Unauthorized Remote Forwarding

Binary data 1979.prm...

OpenSSH < 3.0.2 UseLogin Environment Variable Local Command Execution

Binary data 1992.prm...

Portable OpenSSH < 3.6.1p2 PAM Timing Side-Channel Weakness

Binary data 1984.prm...

OpenSSH < 3.4 Multiple Remote Overflows

Binary data 1987.prm...

CVE-2004-0175

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...

CVE-2004-0175

Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992...

Mandrake Linux Security Advisory : openssh (MDKSA-2003:090-1)

A buffer management error was discovered in all versions of openssh prior to version 3.7. According to the OpenSSH team's advisory: 'It is uncertain whether this error is potentially exploitable, however, we prefer to see bugs fixed proactively.' There have also been reports of an exploit in the...

Mandrake Linux Security Advisory : openssh (MDKSA-2002:040-1)

An input validation error exists in the OpenSSH server between versions 2.3.1 and 3.3 that can result in an integer overflow and privilege escalation. This error is found in the PAMAuthenticationViaKbdInt code in versions 2.3.1 to 3.3, and the ChallengeResponseAuthentication code in versions 2.9....

Mandrake Linux Security Advisory : openssh (MDKSA-2001:081)

In some circumstances, the sshd server may not honor the 'from=' option that can be associated with a key in a user's /.ssh/authorizedkeys2 file if multiple keys are listed. This could allow key-based logins from hosts which should not be allowed access. %NASLMINLEVEL 70300 C Tenable Network...

Mandrake Linux Security Advisory : openssh (MDKSA-2002:019)

Joost Pol found a bug in the channel code of all versions of OpenSSH from 2.0 to 3.0.2. This bug can allow authenticated users with an existing account on the vulnerable system to obtain root privilege or by a malicious server attacking a vulnerable client. OpenSSH 3.1 is not vulnerable to this...

Mandrake Linux Security Advisory : openssh (MDKSA-2001:092)

The new OpenSSH 3.0.2 fixes a vulnerability in the UseLogin option. By default, Mandrake Linux does not enable UseLogin, but if the administrator enables it, local users are able to pass environment variables to the login process. This update also fixes a security hole in the KerberosV support th...

SUSE-SA:2003:038: openssh

The remote host is missing the patch for the advisory SUSE-SA:2003:038 openssh. The openssh package is the most widely used implementation of the secure shell protocol family ssh. It provides a set of network connectivity tools for remote shell login, designed to substitute the traditional...

SUSE-SA:2003:043: openssl

The remote host is missing the patch for the advisory SUSE-SA:2003:043 openssl. OpenSSL is an implementation of the Secure Socket Layer SSL v2/3 and Transport Layer Security TLS v1 protocol. While checking the openssl implementation with a tool-kit from NISCC several errors were revealed most are...

SUSE-SA:2003:039: openssh (second release)

The remote host is missing the patch for the advisory SUSE-SA:2003:039 openssh second release. The openssh package is the most widely used implementation of the secure shell protocol family ssh. It provides a set of network connectivity tools for remote shell login, designed to substitute the...