137 matches found
CVE-2005-2666
Technical details for CVE-2005-2666 are not provided in the connected documents. The supplied sources reference OpenSSH issues unrelated to this CVE. Monitor for future disclosures to confirm affected versions and fixes.
CVE-2001-0144
Technical details about CVE-2001-0144 are not provided in the connected documents. The Initial Description notes an SSH1 CRC-32 overflow issue, but no vendor/version/exploit data is supplied here. Monitor for updates and disclose when more info becomes public.
CVE-2000-0999
Technical details about CVE-2000-0999 are not provided in the connected documents. The initial description mentions format-string vulnerabilities in OpenBSD ssh but no affected versions, impact specifics, or remediation are given here. Monitor for updates.
CVE-2003-0695
OpenSSH prior to 3.7.1 contains multiple buffer management errors (in buffer_init/buffer_free and a separate channels.c function) that can allow a remote attacker to cause denial of service or potentially execute arbitrary code. The issue is associated with CVE-2003-0695; advisories indicate upgr...
CVE-2003-0682
CVE-2003-0682 is part of a set of OpenSSH memory/buffer handling bugs affecting OpenSSH 3.7.1 and earlier. Debian DSA advisories (DSA-382/383) tie CVE-2003-0682 to buffer handling vulnerabilities and recommend upgrading OpenSSH to address these issues; Slackware SSA 2003-266-01 notes OpenSSH 3.7....
CVE-2000-0525
CVE-2000-0525: OpenSSH does not properly drop privileges when UseLogin is enabled, allowing local users to execute arbitrary commands by supplying the command to the ssh daemon. Affected: OpenSSH with UseLogin enabled. Root cause: privileges not dropped correctly after authentication. Impact: pot...
CVE-2002-0575
OpenSSH CVE-2002-0575 describes a buffer overflow in OpenSSH up to 2.9.8 and in the 3.x line up to 3.2.0 (with Kerberos/AFS support and KerberosTgtPassing or AFSTokenPassing enabled). This allows remote and local authenticated users to gain privileges. Root cause: insecure handling of memory lead...
CVE-2004-0175
CVE-2004-0175 is a directory traversal via scp in OpenSSH prior to 3.4p1, enabling a remote server to overwrite arbitrary files on the client. Root cause is improper path handling in scp. Affected product: OpenSSH (scp component). Impact: allows remote file overwrites. Mitigation: upgrade to Open...
CVE-2011-0539
OpenSSH CVE-2011-0539 involves the key_certify function in usr.bin/ssh/key.c when generating legacy certificates with ssh-keygen -t in OpenSSH 5.6/5.7, where the nonce field is not initialized. The result could allow remote attackers to obtain sensitive stack memory contents or facilitate hash co...
CVE-2001-0872
Technical details for CVE-2001-0872 are not provided in the connected documents. The initial description notes OpenSSH 3.0.1 with UseLogin and LD_PRELOAD cleansing issue. Monitor for updates.
CVE-2006-0883
CVE-2006-0883 affects OpenSSH running on FreeBSD 5.3/5.4 when used with OpenPAM. The vulnerability arises because a forked PAM-authentication child may terminate in an unexpected way, which can be exploited by remotely connecting to the SSH server, waiting for the password prompt, and then discon...
CVE-2003-0386
OpenSSH CVE-2003-0386 affects OpenSSH 3.6.1 and earlier. When host access is restricted by numeric IPs and VerifyReverseMapping is disabled, remote attackers can bypass restrictive from= and user@host checks if the reverse DNS hostname contains the numeric IP. Practical impact per the entry is pa...
CVE-2026-55653
CVE-2026-55653 affects OpenSSH and describes a double-free in the DH-GEX client path during FIPS known-group validation, allowing a malicious SSH server to terminate the client process and cause a Denial of Service. The issue is tied to processing attacker-controlled DH-GEX group parameters and i...
CVE-2004-2069
OpenSSH CVE-2004-2069 affects sshd (OpenSSH 3.6.1p2, 3.7.1p2 and possibly other versions) when privilege separation is enabled. The issue is that the non-privileged process is not properly signaled after a session ends once LoginGraceTime has been exceeded, leaving the connection open and enablin...
CVE-2026-55654
CVE-2026-55654 describes a heap out-of-bounds read in OpenSSH during GSSAPI indicator cleanup when a trailing NULL termination is missing in the auth-indicators array. A remote attacker in configurations using GSSAPI authentication with Kerberos could trigger a crash/abort in the SSH authenticati...
CVE-2006-4925
CVE-2006-4925 affects OpenSSH: packet.c vulnerability allows a remote attacker to crash the SSH server by sending an invalid USERAUTH_SUCCESS sequence before NEWKEYS, resulting in newkeys[mode] being NULL. Documented impact is DoS; remediation is to update OpenSSH to a fixed version, but the exac...
CVE-2000-0143
Technical details for CVE-2000-0143 are not provided in the connected documents. The initial description notes local TCP redirection via sshd, but no vendor/versions/impact or fixes are specified beyond that. Monitor for updates.
CVE-2007-3102
OpenSSH 4.3p2 contains an unspecified vulnerability in linux_audit_record_event that allows remote attackers to write arbitrary characters to the audit log via a crafted username. Reported on Fedora Core 6 and possibly other systems (CVE-2007-3102). Public advisories note a fix was released (e.g....
CVE-2001-1585
CVE-2001-1585: OpenSSH 2.3.1 development snapshot (2001-01-18 to 2001-02-08) exposes a flaw in SSH protocol 2 public key authentication: it does not perform a challenge–response step to verify the client’s private key, allowing remote attackers to bypass authentication by using a public key from ...
CVE-2001-0529
Technical details for CVE-2001-0529 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2001-0816
Technical details for CVE-2001-0816 are not provided in the connected documents. No confirmed affected products or fixes are available here. Monitor for updates.
CVE-1999-1010
CVE-1999-1010 affects the SSH 1.2.27 server. The vulnerability is that a client can use the cipher "none" even when the server policy disallows it, bypassing this policy. The impact is described as partial confidentiality with no integrity or availability impact per the metric, and local attack v...
CVE-2000-0217
Technical details about CVE-2000-0217 are not provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, or remediation. Monitor for updates in the available sources.
CVE-2001-1380
Technical details for CVE-2001-1380 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Please monitor for updates from authoritative sources.
CVE-2005-2797
Vulnerability summary ( OpenSSH 4.0 and earlier than 4.2 ) OpenSSH 4.0 and older than 4.2 is affected by improper handling of dynamic port forwarding when no listen address is provided for the -D option, which may enable GatewayPorts. The connected OpenVAS entry aligns with this class of issue bu...
CVE-2000-0992
CVE-2000-0992 is linked to a directory traversal vulnerability in scp for OpenSSH, with the SUSE page noting OpenSSH before 3.4p1 and that this may be a rediscovery of CVE-2000-0992. The connected documents do not provide full technical details (exact affected versions, root cause specifics, or a...
CVE-2003-0787
OpenSSH CVE-2003-0787 affects OpenSSH 3.7.1 and 3.7.1p1 where the PAM conversation function mishandles an array of structures as an array of pointers, allowing stack modification and potential privilege escalation. The linked F5 advisory acknowledges PAM conversation stack corruption but does not...
CVE-2000-1169
OpenSSH client prior to 2.3.0 can fail to disable X11 or agent forwarding, enabling a malicious SSH server to access the X11 display and sniff events or to access the ssh-agent. Affected component is the SSH client’s forwarding behavior; root cause is improper disabling of X11/agent forwarding. T...
CVE-2001-1029
CVE-2001-1029 : In FreeBSD 4.4 and earlier, libutil in OpenSSH does not drop privileges before verifying capabilities for reading copyright and welcome files, allowing local users to bypass capability checks and read arbitrary files by specifying alternate files. The description provides the vuln...
CVE-2001-1382
OpenSSH prior to 2.9.9p2 is affected by an echo simulation traffic analysis countermeasure that sends an extra echo packet after password/Carriage Return. This could let a remote attacker determine that the countermeasure is being used. Upgrade to OpenSSH 2.9.9p2 or later (as indicated by the CVE...
CVE-2001-1507
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2002-0765
Technical details for CVE-2002-0765 are not present in the provided connected documents; the initial description notes a login issue in OpenSSH 3.2.2 with YP/netgroups, but no public details are supplied in connected documents.
CVE-2026-55655
OpenSSH on Linux clients is affected by CVE-2026-55655. The issue allows a local unprivileged attacker to hijack client-side X11 forwarding connections by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. The attack can compr...
CVE-2007-4654
CVE-2007-4654 describes an unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 and CSS 11000 devices that allows remote attackers to cause a denial of service via a sequence of large packets that exploit the SSH CRC32 attack detection overflow (CVE-2001-0144). ...
CVE-2006-5229
OpenSSH portable 4.1 on SUSE Linux and possibly other platforms is affected by a timing-attack vulnerability (CVE-2006-5229) that lets remote attackers infer valid usernames based on response time differences. The issue, demonstrated by sshtime, is tied to how certain configurations and manually-...
CVE-2008-3234
CVE-2008-3234 affects sshd in OpenSSH 4 on Debian GNU/Linux (and the 20070303 OpenSSH snapshot). The issue lets remote authenticated users gain access to arbitrary SELinux roles by appending a ":/" sequence followed by a role name to the username. The IBM X-Force/IBD IBM doc list the base score a...