Lucene search
K

16 matches found

Oracle linux
Oracle linux
added 2026/04/07 12:0 a.m.11 views

rsync security update

3.4.1-2.2 - Resolves: RHEL-152885 - CVE-2025-10158 Out of bounds array access via negative index 3.4.1-2.1 - Resolves: RHEL-152878 - clearing DISPLAY breaks SSHASKPASS expectations...

4.3CVSS5.9AI score0.00283EPSS
Exploits0
Oracle linux
Oracle linux
added 2026/04/01 12:0 a.m.5 views

rsync security update

3.2.5-3.2 - Resolves: RHEL-152888 - CVE-2025-10158 Out of bounds array access via negative index 3.2.5-3.1 - Resolves: RHEL-152879 - clearing DISPLAY breaks SSHASKPASS expectations...

4.3CVSS5.8AI score0.00283EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/11/15 12:0 a.m.28 views

Debian: Security Advisory (DLA-3187-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01348EPSS
Exploits0References4
Prion
Prion
added 2022/10/12 9:15 p.m.31 views

Authentication flaw

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

5CVSS7.5AI score0.01348EPSS
Exploits0References4Affected Software2
Cvelist
Cvelist
added 2022/10/12 12:0 a.m.33 views

CVE-2021-36369

An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2...

7.8AI score0.01348EPSS
Exploits0References4
CVE
CVE
added 2022/10/12 12:0 a.m.452 views

CVE-2021-36369

CVE-2021-36369 affects Dropbear up to version 2020.81. The issue stems from a non-RFC-compliant check of available authentication methods in the client-side SSH code, allowing an SSH server to influence the login process, bypassing security measures such as FIDO2 tokens or SSH-Askpass, and enabli...

7.5CVSS7.4AI score0.01348EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.4 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the ssh-askpass-ptk package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information...

7.2CVSS7.4AI score0.00871EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.4 views

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the ssh-askpass-gnome package for the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

9.3CVSS6.8AI score0.44099EPSS
Exploits7References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2015/04/28 12:0 a.m.4 views

Vulnerabilities of the Debian GNU/Linux operating system, which allow a remote attacker to compromise the confidentiality and integrity of protected information

The SSH-askpass-nonfree package for the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to violations of the confidentiality and integrity of protected information. These vulnerabilities can be exploited remotely...

4CVSS7.4AI score0.02841EPSS
Exploits0References3Affected Software1
OpenVAS
OpenVAS
added 2010/12/23 12:0 a.m.9 views

Mandriva Update for keychain MDVA-2010:235 (keychain)

Check for the Version of keychain OpenVAS Vulnerability Test Mandriva Update for keychain MDVA-2010:235 keychain Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

0.2AI score
Exploits0References2
OpenVAS
OpenVAS
added 2010/12/23 12:0 a.m.12 views

Mandriva Update for keychain MDVA-2010:235 (keychain)

Check for the Version of keychain OpenVAS Vulnerability Test Mandriva Update for keychain MDVA-2010:235 keychain Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

0.3AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2010/12/09 12:0 a.m.11 views

MDVA-2010:235 : keychain

Due to a bug in the keychain package the '--noask' option wasn't always used, this caused the Qt4 ssh-askpass dialogue to get loaded before a window manager was fully-started, preventing the user from entering the passphrase as the dialogue never gets focus without a window manager running. This...

6.9AI score
Exploits0References1
securityvulns
securityvulns
added 2008/03/25 12:0 a.m.81 views

rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server

rPath Security Advisory: 2008-0120-1 Published: 2008-03-25 Products: rPath Linux 1 rPath Appliance Platform Linux Service 1 Rating: Major Exposure Level Classification: Local User Deterministic Unauthorized Access Updated Versions: gnome-ssh-askpass=conary.rpath.com@rpl:1/4.7p1-0.2-1...

6.9CVSS6AI score0.00346EPSS
Exploits1
seebug.org
seebug.org
added 2007/09/14 12:0 a.m.25 views

OpenSSH X11 Cookie本地验证绕过漏洞

OpenSSH是一款开放源码的SSH协议的实现。 OpenSSH不正确管理可信和不可信X11 COOKIE,本地攻击者可以利用漏洞绕过验证启动转发的X11会话。 目前没有详细漏洞细节提供。 rPath rPath Linux 1 OpenSSH OpenSSH 4.6 GNOME gnome-ssh-askpass 0 Gentoo Linux 2007.0 升级到最新程序: http://www.openssh.com/txt/release-4.7...

7AI score
Exploits0
Positive Technologies
Positive Technologies
added 1970/01/01 12:0 a.m.4 views

PT-2006-7543 · Debian · Openssh-Client-Udeb +6

Name of the Vulnerable Software and Affected Versions: openssh-client versions prior to 4.3p2-9etch3 openssh-server versions prior to 4.3p2-9etch3 openssh-server-udeb versions prior to 4.3p2-9etch3 openssh-client-udeb versions prior to 4.3p2-9etch3 ssh-krb5 versions prior to 4.3p2-9etch3...

9.3CVSS7.3AI score0.99506EPSS
Exploits68References32
Positive Technologies
Positive Technologies
added 1970/01/01 12:0 a.m.11 views

PT-2001-2674 · Isc +3 · Inn2-Inews +8

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 2.3.0 ssh-1 versions prior to 1.2.31 Debian GNU/Linux affected versions not specified Description: The issue concerns multiple vulnerabilities in various packages of the Debian GNU/Linux operating system, including...

10CVSS8.3AI score0.99506EPSS
Exploits207References346
Rows per page
Query Builder