Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 11

Количество 11

fstec логотип

BDU:2023-07108

почти 11 лет назад

Уязвимость средства криптографической защиты OpenSSH, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код или остановить службу sshd

CVSS3: 7.4
EPSS: Низкий
ubuntu логотип

CVE-2015-6563

почти 11 лет назад

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS3: 6.4
EPSS: Низкий
redhat логотип

CVE-2015-6563

почти 11 лет назад

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS2: 6.2
EPSS: Низкий
nvd логотип

CVE-2015-6563

почти 11 лет назад

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS3: 6.4
EPSS: Низкий
debian логотип

CVE-2015-6563

почти 11 лет назад

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD pla ...

CVSS3: 6.4
EPSS: Низкий
github логотип

GHSA-2f6c-wrfr-f7rw

около 4 лет назад

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS3: 6.4
EPSS: Низкий
oracle-oval логотип

ELSA-2015-2088

больше 10 лет назад

ELSA-2015-2088: openssh security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2016-0741

около 10 лет назад

ELSA-2016-0741: openssh security, bug fix, and enhancement update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1695-1

почти 11 лет назад

Security update for openssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1581-1

почти 11 лет назад

Security update for openssh

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2015:1544-1

почти 11 лет назад

Security update for openssh

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2023-07108

Уязвимость средства криптографической защиты OpenSSH, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код или остановить службу sshd

CVSS3: 7.4
0%
Низкий
почти 11 лет назад
ubuntu логотип
CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS3: 6.4
0%
Низкий
почти 11 лет назад
redhat логотип
CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS2: 6.2
0%
Низкий
почти 11 лет назад
nvd логотип
CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS3: 6.4
0%
Низкий
почти 11 лет назад
debian логотип
CVE-2015-6563

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD pla ...

CVSS3: 6.4
0%
Низкий
почти 11 лет назад
github логотип
GHSA-2f6c-wrfr-f7rw

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVSS3: 6.4
0%
Низкий
около 4 лет назад
oracle-oval логотип
ELSA-2015-2088

ELSA-2015-2088: openssh security, bug fix, and enhancement update (MODERATE)

больше 10 лет назад
oracle-oval логотип
ELSA-2016-0741

ELSA-2016-0741: openssh security, bug fix, and enhancement update (MODERATE)

около 10 лет назад
suse-cvrf логотип
SUSE-SU-2015:1695-1

Security update for openssh

почти 11 лет назад
suse-cvrf логотип
SUSE-SU-2015:1581-1

Security update for openssh

почти 11 лет назад
suse-cvrf логотип
SUSE-SU-2015:1544-1

Security update for openssh

почти 11 лет назад

Уязвимостей на страницу