Description
Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | openssh +3 | 4.3p2-24.el5 | RHSA-2007:0540 |
| RHEL 5 | pam +1 | 0.99.6.2-3.26.el5 | RHSA-2007:0555 |
| RHEL 4 | openssh +4 | 3.9p1-8.RHEL4.24 | RHSA-2007:0703 |
| RHEL 4 | pam +1 | 0.77-66.23 | RHSA-2007:0737 |
Advisories 4
- RHSA-2007:0555 Red Hat Security Advisory: pam security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0737 Red Hat Security Advisory: pam security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0703 Red Hat Security Advisory: openssh security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2007:0540 Red Hat Security Advisory: openssh security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- 28319 third-party-advisory
- RHSA-2007:0555 vendor-advisory
- FEDORA-2007-715 vendor-advisory
- 27588 third-party-advisory
- oval:org.mitre.oval:def:11124 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm
- 39214 vdb-entry
- RHSA-2007:0737 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=248059
- 27235 third-party-advisory
- RHSA-2007:0703 vendor-advisory
- 28320 third-party-advisory
- RHSA-2007:0540 vendor-advisory
- 27590 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm
- 26097 vdb-entry