4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.009 Low
EPSS
Percentile
82.3%
Unspecified vulnerability in the linux_audit_record_event function in
OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows
remote attackers to write arbitrary characters to an audit log via a
crafted username. NOTE: some of these details are obtained from third
party information.
Author | Note |
---|---|
mdeslaur | this issue in util-linux is CVE-2008-1296 I’m removing util-linux from here |