724 matches found
CVE-2013-6441
The lxc-sshd template templates/lxc-sshd.in in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file...
MikroTik RouterOS 5.x < 5.26 / 6.x < 6.3 sshd Unspecified Remote Heap Corruption
According to its self-reported version, the remote networking device is running a version of MikroTik 5.x before 5.26 or 6.x before 6.3. It, therefore, reportedly has a heap corruption vulnerability in its sshd component that can be leveraged by an unauthenticated, remote attacker to crash the SS...
OpenSSH Fixes Memory Corruption Bug With Update
The developers behind OpenSSH, the suite of connectivity tools that helps users encrypt traffic on Internet sessions, acknowledged and patched over the weekend that a memory corruption vulnerability exists in some builds of the main suite. If exploited, the vulnerability, which can be found in bo...
Security fix for the ALT Linux 6 package openssh version 5.9p1-alt7
Nov. 8, 2013 Dmitry V. Levin 5.9p1-alt7 - sshd: applied upstream initialization fix CVE-2013-4548...
Security fix for the ALT Linux 8 package openssh version 5.9p1-alt7
Nov. 8, 2013 Dmitry V. Levin 5.9p1-alt7 - sshd: applied upstream initialization fix CVE-2013-4548...
OpenSSH -- Memory corruption in sshd
The OpenSSH development team reports: A memory corruption vulnerability exists in the post- authentication sshd process when an AES-GCM cipher [email protected] or [email protected] is selected during kex exchange. If exploited, this vulnerability might permit code execution with the...
SOL14741 - OpenSSH vulnerability CVE-2010-5107
Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...
Mikrotik RouterOS 5.* and 6.* sshd remote preauth heap corruption
Hello lists, here you find the analysis of a vulnerability I recently discovered. Mikrotik RouterOS 5. and 6. sshd remote preauth heap corruption http://kingcope.wordpress.com/2013/09/02/mikrotik-routeros-5-and-6-sshd-remote-preauth-heap-corruption/ Additionally it includes a way to drop into a...
MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption
During an audit the Mikrotik RouterOS sshd ROSSSH has been identified to have a remote previous to authentication heap corruption in its sshd component. Exploitation of this vulnerability will allow full access to the router device. This analysis describes the bug and includes a way to get...
MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption
MikroTik RouterOS - sshd ROSSSH Remote Heap Corruption During an audit the Mikrotik RouterOS sshd ROSSSH has been identified to have a remote previous to authentication heap corruption in its sshd component. Exploitation of this vulnerability will allow full access to the router device. This...
Sysax Multi-Server SSHD Key Exchange Denial of Service
A denial of service vulnerability has been reported in Sysax Multi-Server 6.10...
Solaris 10 (x86) : 148105-23 (deprecated)
SunOS 5.10x86: last, ssh/sshd patch. Date this patch was last updated by Sun : Jun/09/16 This plugin has been deprecated and either replaced with individual 148105 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Sysax Multi-Server 6.10 SSHD Key Exchange Denial of Service
This module sends a specially-crafted SSH Key Exchange causing the service to crash. Module Options msf use auxiliary/dos/windows/ssh/sysax/sshdkexchange msf undefinedsshdkexchange show actions ...actions... msf undefinedsshdkexchange set ACTION msf undefinedsshdkexchange show options ...show and...
CentOS Update for openssh CESA-2013:0519 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS 6 : openssh (CESA-2013:0519)
Updated openssh packages that fix one security issue, multiple bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...
Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20130221)
Due to the way the pamsshagentauth PAM module was built in Scientific Linux 6, the glibc's error function was called rather than the intended error function in pamsshagentauth to report errors. As these two functions expect different arguments, it was possible for an attacker to cause an...
SSHD libkeyutils Backdoor
The remote host appears to contain a trojaned libkeyutils library. The trojaned library links to SSHD, steals credentials, and sends spam. TRUSTED...
RedHat Update for openssh RHSA-2013:0519-02
Check for the Version of openssh OpenVAS Vulnerability Test RedHat Update for openssh RHSA-2013:0519-02 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
openssh-server Forced Command Handling Information Disclosure Vulnerability
The authparseoptions function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorizedkeys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user accoun...
openssh security, bug fix, and enhancement update
5.3p1-81 - fixes in openssh-5.3p1-required-authentications.patch 657378 5.3p1-79 - fix forward on non-localhost ports with IPv6 732955 5.3p1-78 - clear SELinux exec context before exec passwd 814691 5.3p1-77 - prevent post-auth resource exhaustion 809938 5.3p1-76 - don't escape backslah in a bann...