10 matches found
Ubuntu Update for openssh update USN-612-5
Ubuntu Update for Linux kernel vulnerabilities USN-612-5 OpenVAS Vulnerability Test $Id: gbubuntuUSN6125.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssh update USN-612-5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...
Debian Security Advisory DSA 1576-2 (openssh)
The remote host is missing an update to openssh announced via advisory DSA 1576-2. OpenVAS Vulnerability Test $Id: deb15762.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1576-2 openssh Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
CVE-2008-2285
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...
Authentication flaw
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...
CVE-2008-2285
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...
CVE-2008-2285
CVE-2008-2285 stems from ssh-vulnkey failing to recognize authorized_keys lines containing options, enabling exploitation links to CVE-2008-0166 via weak OpenSSL PRNG. The underlying issue (CVE-2008-0166) is Debian/OpenSSL PRNG predictability caused by seeding with PID alone, drastically limiting...
CVE-2008-2285: Undefined Security Weakness
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...
[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness
------------------------------------------------------------------------ Debian Security Advisory DSA-1576-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 16, 2008 http://www.debian.org/security/faq -...
Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)
Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as 'no-port-forwarding' or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...
