PT-2000-1509 · Openssh · Ssh

Publicado 2000-07-05 · Atualizado 2017-10-10 · CVE-2000-0575

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SSH version 1.2.27

Description The issue concerns SSH with Kerberos authentication support, where Kerberos tickets are stored in a file created in the user's current directory. This could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Recommendations For SSH version 1.2.27, consider restricting access to the home directory or avoiding the use of NFS for home directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2000-0575

Produtos afetados

Ssh

Referências · 4

• http://securityfocus.com/bid/1426 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/4903 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-0575 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=96256265914116&w=2 · Nota