Description
OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.
References
- IMNX-2001-70-034-01 vendor-advisory
- 3369 vdb-entry
- RHSA-2001:114 vendor-advisory
- 20010926 OpenSSH Security Advisory (adv.option) mailing-list
- CLSA-2001:431 vendor-advisory
- VU#905795 third-party-advisory
- M-010 third-party-advisory government-resource
- MDKSA-2001:081 vendor-advisory
- 642 vdb-entry
- openssh-access-control-bypass(7179) vdb-entry