Description
SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.
References
- ssh-setsid-privilege-elevation(10710) vdb-entry
- 6247 vdb-entry
- http://www.ssh.com/company/newsroom/article/286/
- VU#740619 third-party-advisory