Описание
Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.
Ссылки
- Mailing ListPatchThird Party Advisory
- Third Party Advisory
- Mailing ListPatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
EPSS
4.7 Medium
CVSS3
4.7 Medium
CVSS2
Дефекты
Связанные уязвимости
Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.
Dropbear before 2017.75 might allow local users to read certain files ...
Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a command= option. This occurs because ~/.ssh/authorized_keys is read with root privileges and symlinks are followed.
Уязвимость модуля /.ssh/authorized_keys пакета программ для организации сеансов связи по протоколу SSH Dropbear, позволяющая нарушителю раскрыть защищаемую информацию
EPSS
4.7 Medium
CVSS3
4.7 Medium
CVSS2