PT-2006-7580 · Openssh+3 · Openssh+3
Josh Bressers
·
Publicado
1970-01-01
·
Atualizado
2024-07-08
·
CVE-2006-0225
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 4.2p1
OpenSSH version 3.1p1
Description
The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely, allowing attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces. The vulnerability may lead to disruption of service and unauthorized access to sensitive data.
Recommendations
For OpenSSH version 3.1p1, consider upgrading to a version later than 4.2p1 to resolve the issue.
For OpenSSH versions prior to 4.2p1, upgrade to version 4.2p1 or later to fix the vulnerability.
As a temporary workaround, consider restricting access to the
scp command until a patch is available.
Avoid using filenames that contain shell metacharacters or spaces in the affected scp command until the issue is resolved.Exploit
Correção
Double Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Hp-Ux
Openssh
Red Hat