Поиск уязвимостей
Количество 34
Количество 34
openSUSE-SU-2019:1602-1
Security update for openssh
openSUSE-SU-2019:0307-1
Security update for openssh
SUSE-SU-2019:1524-1
Security update for openssh
SUSE-SU-2019:14030-1
Security update for openssh
SUSE-SU-2019:14016-1
Security update for openssh
SUSE-SU-2019:0941-1
Security update for openssh
SUSE-SU-2019:0496-1
Security update for openssh
RLSA-2019:3702
Moderate: openssh security, bug fix, and enhancement update
ELSA-2019-3702
ELSA-2019-3702: openssh security, bug fix, and enhancement update (MODERATE)
openSUSE-SU-2019:0093-1
Security update for openssh
openSUSE-SU-2019:0091-1
Security update for openssh
SUSE-SU-2019:13931-1
Security update for openssh
SUSE-SU-2019:0132-1
Security update for openssh
SUSE-SU-2019:0126-1
Security update for openssh
SUSE-SU-2019:0125-2
Security update for openssh
SUSE-SU-2019:0125-1
Security update for openssh
ALT-PU-2022-1557
ALT-PU-2022-1557: package `openssh` update to version 7.9p1-alt4.p10.1
CVE-2019-6111
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVE-2019-6111
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVE-2019-6111
An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | openSUSE-SU-2019:1602-1 Security update for openssh | больше 7 лет назад | ||
| openSUSE-SU-2019:0307-1 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:1524-1 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:14030-1 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:14016-1 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:0941-1 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:0496-1 Security update for openssh | больше 7 лет назад | ||
 | RLSA-2019:3702 Moderate: openssh security, bug fix, and enhancement update | 4 месяца назад | ||
| ELSA-2019-3702 ELSA-2019-3702: openssh security, bug fix, and enhancement update (MODERATE) | почти 7 лет назад | ||
| openSUSE-SU-2019:0093-1 Security update for openssh | почти 8 лет назад | ||
| openSUSE-SU-2019:0091-1 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:13931-1 Security update for openssh | почти 8 лет назад | ||
| SUSE-SU-2019:0132-1 Security update for openssh | почти 8 лет назад | ||
| SUSE-SU-2019:0126-1 Security update for openssh | почти 8 лет назад | ||
| SUSE-SU-2019:0125-2 Security update for openssh | больше 7 лет назад | ||
| SUSE-SU-2019:0125-1 Security update for openssh | почти 8 лет назад | ||
| ALT-PU-2022-1557 ALT-PU-2022-1557: package `openssh` update to version 7.9p1-alt4.p10.1 | CVSS3: 6.8 | больше 4 лет назад | |
 | CVE-2019-6111 An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). | CVSS3: 5.9 | 58% Средний | почти 8 лет назад |
 | CVE-2019-6111 An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). | CVSS3: 5.3 | 58% Средний | почти 8 лет назад |
 | CVE-2019-6111 An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file). | CVSS3: 5.9 | 58% Средний | почти 8 лет назад |
Уязвимостей на страницу