Linux: SSH /etc/hosts.allow chmod

The access control software consults two files. The search stops at the first match: - Access will be granted when a daemon, client pair matches an entry in the /etc/hosts.allow file. - Otherwise, access will be denied when a daemon, client pair matches an entry in the /etc/hosts.deny file. -...

Linux: SSH /etc/hosts.deny chown

The access control software consults two files. The search stops at the first match: - Access will be granted when a daemon, client pair matches an entry in the /etc/hosts.allow file. - Otherwise, access will be denied when a daemon, client pair matches an entry in the /etc/hosts.deny file. -...

Linux: Required Packages

This script checks if all of the given packages are installed on the host. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-5319

Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP service on a NAS server. A remote unauthenticated attacker may potentially exploit this vulnerability an...

Linux: SSH /etc/hosts.allow chown

The access control software consults two files. The search stops at the first match: - Access will be granted when a daemon, client pair matches an entry in the /etc/hosts.allow file. - Otherwise, access will be denied when a daemon, client pair matches an entry in the /etc/hosts.deny file. -...

Linux: SSH /etc/hosts.deny chmod

The access control software consults two files. The search stops at the first match: - Access will be granted when a daemon, client pair matches an entry in the /etc/hosts.allow file. - Otherwise, access will be denied when a daemon, client pair matches an entry in the /etc/hosts.deny file. -...

Linux: SSH ListenAddress

ListenAddress specifies the local address sshd should listen on. If port is not specified, sshd will listen on the address and all prior Port options specified. The default is to listen on all local addresses. Multiple ListenAddress options are permitted. Additionally, any Port options must prece...

Remote Code Execution

salt is vulnerable to remote code execution. A remote attacker is able to obtain unauthenticated access to the application when the NetAPI is enabled with an SSH roster defined. Subsequently, the rawshell parameter used when calling the Salt SSH client via API allows a remote attacker to execute...

PYSEC-2020-177

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

CVE-2019-17361

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

Command injection

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

PYSEC-2020-196

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

CVE-2019-17361

In SaltStack Salt through 2019.2.0, the salt-api NET API with the ssh client enabled is vulnerable to command injection. This allows an unauthenticated attacker with network access to the API endpoint to execute arbitrary code on the salt-api host...

Linux: SSH /etc/ssh/sshd_config chmod

The /etc/ssh/sshdconfig file contains configuration specifications for sshd. The /etc/ssh/sshdconfig file needs to be protected from unauthorized changes by non-privileged users. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Linux: SSH AllowGroups

There are several options available to limit which users and group can access the system via SSH. It is recommended that at least one of the following options be leveraged: AllowUsers AllowGroups DenyUsers DenyGroups Note: The check reports the AllowGroups from the SSHD config file. Please check...

Linux: SSH /etc/ssh/sshd_config chown

The /etc/ssh/sshdconfig file contains configuration specifications for sshd. This should be protected from unauthorized changes by non-privileged users. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or...

Linux: SSH DenyUsers

The DenyUsersvariable gives the system administrator the option of denying specific users to ssh into the system. The list consists of space separated user names. Numeric user IDs are not recognized with this variable. If a system administrator wants to restrict user access further by specificall...

openSUSE Security Update : openssl-1_1 (openSUSE-2020-62)

This update for openssl-11 fixes the following issues : Security issue fixed : - CVE-2019-1551: Fixed an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli bsc1158809. Various FIPS related improvements were done : - FIPS: Backport SSH KDF to openssl...

FortiSIEM default SSH key for the "tunneluser" account is the same across all appliances

A use of hard-coded cryptographic key vulnerability in FortiSIEM may allow a remote unauthenticated attacker to obtain SSH access to the supervisor as the restricted user "tunneluser" by leveraging knowledge of the private key from another installation or a firmware image...

Huawei EulerOS Detection Consolidation

Consolidation of Huawei EulerOS detections. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...