119 results · Feed
-
Medium 6.5
The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing auth…
-
High 7.5
The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t …
-
Low 3.7
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.…
-
Unscored —
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distribut…
-
Unscored —
sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attem…
-
Unscored —
sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication…
-
Unscored —CVE-2008-3234 Public exploit
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain a…
-
Unscored —
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain opt…
-
Unscored —
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that g…
-
Unscored —
OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directiv…
-
Unscored —
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set …
-
Unscored —
ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 co…
-
Unscored —
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence…
-
Unscored —
OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the exis…
-
Unscored —
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification tha…
-
Unscored —CVE-2006-4925 EPSS 15%
packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol …
-
Unscored —
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to de…
-
Unscored —
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and p…
-
Unscored —
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service…
-
Unscored —
OpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked child process terminates…
-
Unscored —
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or …
-
Unscored —
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to cli…
-
Unscored —
OpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D" option) when a liste…
-
Unscored —
SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys …
-
Unscored —
OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers t…
-
Unscored —
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly s…
-
Unscored —
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with…
-
Unscored —
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrar…
-
Unscored —
The PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as an array of pointers, w…
-
Unscored —
The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, doe…
-
Unscored —
"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 …
-
Unscored —
Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute…
-
Unscored —CVE-2003-0693 EPSS 11%
A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to exe…
-
Unscored —
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled,…
-
Unscored —
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user …
-
Unscored —
sshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users to successfully authe…
-
Unscored —CVE-2002-0639 EPSS 18%
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challeng…
-
Unscored —
Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large n…
-
Unscored —CVE-2000-0992 Public exploit
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary fil…