CVE-2011-0437

2011-03-0700:00:00

ubuntu.com

0.004 Low

EPSS

Percentile

73.3%

JSON

shared/inc/sql/ssh.php in the SSH accounts management implementation in
Domain Technologie Control (DTC) before 0.32.9 allows remote authenticated
users to delete arbitrary accounts via the edssh_account parameter in a
deletesshaccount Delete action.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/dtc/+bug/729700>

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchdtc< 0.25.3-2ubuntu1.1UNKNOWN
ubuntu9.10noarchdtc< 0.29.17-1+lenny1build0.9.10.1UNKNOWN
ubuntu10.04noarchdtc< 0.30.10-1ubuntu1UNKNOWN
ubuntu10.10noarchdtc< 0.30.18-1ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	dtc	< 0.25.3-2ubuntu1.1	UNKNOWN
ubuntu	9.10	noarch	dtc	< 0.29.17-1+lenny1build0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	dtc	< 0.30.10-1ubuntu1	UNKNOWN
ubuntu	10.10	noarch	dtc	< 0.30.18-1ubuntu1	UNKNOWN