Description
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
References
- VU#341187 third-party-advisory
- 20020523 [Fwd: Updated version of SSH Secure Shell available] mailing-list
- http://www.ssh.com/company/newsroom/article/201/
- 4810 vdb-entry
- ssh-allowedauthentications-bypass-auth(9163) vdb-entry
- M-081 third-party-advisory government-resource
- http://www.ssh.com/products/ssh/advisories/authentication.cfm