640 matches found
CVE-2002-0460
The vulnerability CVE-2002-0460 affects Bitvise WinSSHD prior to 2002-03-16. It allows remote attackers to cause a denial of service (resource exhaustion) by initiating a large number of incomplete connections that are not properly terminated and not properly freed by SSHd. The connected document...
CVE-2001-0364
SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections...
OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities
According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...
OpenSSH allows arbitrary file deletion via symlink redirection of temporary file
Overview Due to insecure handling of temporary files, some versions of sshd, an encrypted connection program, can delete any file named "cookies" accessible via the computer running sshd. Description sshd is the server software used to support ssh, a popular encryted connection program. Some...
CVE-2001-0471
CVE-2001-0471 applies to SSH1 (SSH server 1.2.30 or earlier). The issue is that SSH1 SSH Daemon does not log repeated login attempts, which could allow remote attackers to carry out brute-force-style account compromises without detection. Multiple connected sources (NVD/Nessus/OpenVAS entries) co...
CVE-2000-0992
CVE-2000-0992 is linked to a directory traversal vulnerability in scp for OpenSSH, with the SUSE page noting OpenSSH before 3.4p1 and that this may be a rediscovery of CVE-2000-0992. The connected documents do not provide full technical details (exact affected versions, root cause specifics, or a...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-2000-0992
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. dot dot attack...
CVE-1999-0248
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...
CVE-1999-0248
The CVE-1999-0248 entry concerns sshd 1.2.17, where a race condition in the authentication agent mechanism can allow an attacker to steal another user’s credentials. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE List, EUVD) without providing explicit exploit code or c...
CVE-2000-0784
The CVE concerns the Rapidstream 2.1 Beta VPN appliance where the sshd daemon contains a hard-coded rsadmin account with a null password. This effectively allows remote attackers to authenticate without credentials and execute arbitrary commands via SSH, giving full compromise potential to the de...
OpenSSH < 2.1.1 UseLogin Local Privilege Escalation
According to its banner, the remote host appears to be running OpenSSH version older than 2.1.1. Such versions are reportedly affected by a local privilege esclation vulnerability. If the UseLogin option is enabled, then sshd does not switch to the uid of the user logging in. Instead, sshd relies...
Лишний открытый порт в sshd из FreeBSD
Кроме порта TCP/22 прослушивается еще и порт TCP/722...
CVE-2000-0143
Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.
ssh.txt
Subject: remote DoS against inetd and ssh To: [email protected] Hi, At the beginning i'd like to excuse all of you if it is commonly well known hmm, i guess it is, but noone patched it ;. Both DoSs use something known as portfuck e.g. while true; do telnet host port & done. 1. If you use ...
sshd.install.risks.txt
Date: Mon, 10 May 1999 22:26:19 +0200 From: "GWDVMS::MOELLER" Subject: Risks of upgrading a UNIX system When was the last time you rebuilt all privileged suid root' applications when upgrading a unix system, just in case? I'm pretty sure one can find small print' that demands this, however I'm...
sshd-DoS.txt
Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Maybe some sshd 1.x/2.0 stupidities: ------------------------------------ Unprivledged luser could create symlink in /.ssh or /.sshd to virtually any fil...