Описание
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
Ссылки
- PatchVendor Advisory
- ExploitVendor Advisory
- Vendor Advisory
- Vendor Advisory
- US Government Resource
- ExploitPatchVendor Advisory
- PatchVendor Advisory
- ExploitVendor Advisory
- Vendor Advisory
- Vendor Advisory
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2.9 (включая)
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00622
Низкий
7.2 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack.
CVSS3: 9.8
altlinux
больше 2 лет назад
ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1
CVSS3: 9.8
altlinux
больше 2 лет назад
ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost
EPSS
Процентиль: 50%
0.00622
Низкий
7.2 High
CVSS2
Дефекты
NVD-CWE-Other