Description
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | openssh | 1:4.2p1-1 | — |
| Debian 13 | openssh | 1:4.2p1-1 | — |
| Debian 12 | openssh | 1:4.2p1-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | openssh +4 | 3.9p1-8.RHEL4.9 | RHSA-2005:527 |
Advisories 1
- RHSA-2005:527 Red Hat Security Advisory: openssh security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2005:527 vendor-advisory
- hpux-secure-shell-dos(24064) vdb-entry
- 18507 third-party-advisory
- HPSBUX02090 vendor-advisory
- SUSE-SR:2006:003 vendor-advisory
- 19141 vdb-entry
- 18406 third-party-advisory
- 14729 vdb-entry
- oval:org.mitre.oval:def:9717 vdb-entry signature
- 18717 third-party-advisory
- 17077 third-party-advisory
- ADV-2006-0144 vdb-entry
- oval:org.mitre.oval:def:1566 vdb-entry signature
- oval:org.mitre.oval:def:1345 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm
- 17245 third-party-advisory
- 18661 third-party-advisory
- 18010 third-party-advisory
- [openssh-unix-announce] 20050901 Announce: OpenSSH 4.2 released mailing-list
- MDKSA-2005:172 vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm
- 1014845 vdb-entry
- USN-209-1 vendor-advisory
- 16686 third-party-advisory