Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1657
HistoryApr 02, 2008 - 12:00 a.m.

CVE-2008-1657

2008-04-0200:00:00
ubuntu.com
ubuntu.com
16

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.8%

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to
bypass the sshd_config ForceCommand directive by modifying the .ssh/rc
session file.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchopenssh< 1:4.6p1-5ubuntu0.6UNKNOWN
ubuntu8.04noarchopenssh< 1:4.7p1-8ubuntu1UNKNOWN

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.004 Low

EPSS

Percentile

74.8%