Cryptographic Issues

Overview Affected versions of this package are vulnerable to Cryptographic Issues. Implementations of SSH version 1.5, including 1 OpenSSH up to version 2.3.0, 2 AppGate, and 3 ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a...

Remote DoS attack against SSH Secure Shell for Windows Servers Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 U.S.S.R labs Buenos Aires, Argentina http://www.ussrback.com Topic: Remote DoS attack against SSH Secure Shell for Windows Servers Vulnerability USSR Advisory Code: USSR-2001001 Announced: 2001-03-16 Credits: Luciano Martins [email protected] Affects:...

DEBIAN-CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...

CVE-2000-0999

Overview Format string vulnerabilities in OpenBSD ssh program and possibly other BSD-based operating systems allow attackers to gain root privileges. Remediation There is no fixed version for openssh. References - Ftp.openbsd.org...

CVE-2000-0525

Overview OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon. Remediation There is no fixed version for openssh. References - Archives.neohapsis.com - Openbsd.org - Osvdb.o...

sses-sshauth.txt

Sword & Shield Enterprise Security, Inc. - Security Advisory www.sses.net, Copyright c 2000 Advisory: Secure Shell Authentication Vulnerability Release Date: May 10, 2000 Application: sshd Severity: High - A user local or remote can log into any account with a valid login shell. Status: Affected...

CVE-1999-0634

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

PT-1999-1184 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue concerns an SSH server that permits authentication via the .rhosts file. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-1998-1068 · Hewlett Packard · Hp-Ux Ssh

Name of the Vulnerable Software and Affected Versions: HP-UX SSH version 1.2.25 Description: The issue allows access to new user accounts on the system. Recommendations: For HP-UX SSH version 1.2.25, update to a newer version that addresses this issue to prevent unauthorized access to new user...

Vulnerabilities in PuTTY and PSCP

Advisory ID Internal CORE-2004-0705 Bugtraq ID: 10850, 10870 CVE Name: None currently assigned. Title: Vulnerabilities in PuTTY and PSCP Class: Boundary Error Condition Remotely Exploitable: Yes Locally Exploitable: No Vendors contacted: - Maintainers of PuTTY . Core notification: 2004-07-28...