Lucene search
Ubuntu.comUB:CVE-2014-9278HistoryDec 06, 2014 - 12:00 a.m.
CVE-2014-9278
2014-12-0600:00:00
ubuntu.com
ubuntu.com
12
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.5%
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and
when running in a Kerberos environment, allows remote authenticated users
to log in as another user when they are listed in the .k5users file of that
user, which might bypass intended authentication requirements that would
force a local login.
Notes
| Author | Note |
|---|---|
| mdeslaur | vulnerable patch not included in Debian/Ubuntu |
Related
f5
f5
K16009 : OpenSSH vulnerability CVE-2014-9278
2015-01-22 00:00:00
SOL16009 - OpenSSH vulnerability CVE-2014-9278
2015-01-21 00:00:00
prion
prion
Authentication flaw
2014-12-06 15:59:00
debiancve
debiancve
CVE-2014-9278
2014-12-06 15:59:00
cve
cve
CVE-2014-9278
2014-12-06 15:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-15.fc21
2015-08-03 04:31:13
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-13.fc21
2015-07-10 19:09:25
openvas
openvas
Oracle: Security Advisory (ELSA-2015-0425)
2015-10-06 00:00:00
Fedora Update for openssh FEDORA-2015-12054
2015-08-11 00:00:00
Fedora Update for openssh FEDORA-2015-11067
2015-07-11 00:00:00
nessus
nessus
Oracle Linux 7 : openssh (ELSA-2015-0425)
2015-03-10 00:00:00
CentOS 7 : openssh (CESA-2015:0425)
2015-03-18 00:00:00
RHEL 7 : openssh (RHSA-2015:0425)
2015-03-05 00:00:00
redhat
redhat
(RHSA-2015:0425) Moderate: openssh security, bug fix and enhancement update
2015-03-05 00:00:00
oraclelinux
oraclelinux
openssh security, bug fix and enhancement update
2015-03-09 00:00:00
centos
centos
openssh, pam_ssh_agent_auth security update
2015-03-17 13:29:24
symantec
symantec
SA104 : OpenSSH Vulnerabilities
2015-12-08 08:00:00
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
61.5%
Related for UB:CVE-2014-9278