CVE-2008-1657

Опубликовано: 02 апр. 2008

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

Ссылки

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc
http://aix.software.ibm.com/aix/efixes/security/ssh_advisory.asc
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.html
http://secunia.com/advisories/29602
Vendor Advisory
http://secunia.com/advisories/29609
Vendor Advisory
http://secunia.com/advisories/29683
Vendor Advisory
http://secunia.com/advisories/29693
Vendor Advisory
http://secunia.com/advisories/29735
Vendor Advisory
http://secunia.com/advisories/29939
Vendor Advisory
http://secunia.com/advisories/30361
Vendor Advisory
http://secunia.com/advisories/31531
Vendor Advisory
http://secunia.com/advisories/31882
Vendor Advisory
http://secunia.com/advisories/32080
Vendor Advisory
http://secunia.com/advisories/32110
Vendor Advisory
http://support.attachmate.com/techdocs/2374.html
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0139
http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:098
http://www.openbsd.org/errata43.html#001_openssh
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openbsd:openssh:4.4:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.4p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.6:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.7:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:4.8:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00458

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2008-1657

ubuntu

почти 18 лет назад

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

CVE-2008-1657

redhat

почти 18 лет назад

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

CVE-2008-1657

debian

почти 18 лет назад

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated user ...

GHSA-4fmw-7mgw-xgw8

github

почти 4 года назад

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

BDU:2015-09635

fstec

почти 18 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 63%

0.00458

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264