PT-2007-4391 · Openbsd+1 · Openssh+1

Tomas Mraz · Publicado 2007-10-18 · Atualizado 2017-10-11 · CVE-2007-3102

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: OpenSSH version 4.3p2

Description: The issue allows remote attackers to write arbitrary characters to an audit log via a crafted username. This is due to an unspecified vulnerability in the linux audit record event function.

Recommendations: For OpenSSH version 4.3p2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3102

RHSA-2007:0540

RHSA-2007:0555

RHSA-2007:0703

RHSA-2007:0737

RHSA-2007_0540

RHSA-2007_0555

RHSA-2007_0703

RHSA-2007_0737

Produtos afetados

Openssh

Red Hat

Referências · 31

• https://access.redhat.com/security/cve/CVE-2006-5052 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm · Nota
• https://access.redhat.com/security/cve/CVE-2007-3102 · Nota
• http://redhat.com/support/errata/RHSA-2007-0703.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2007:0737 · Nota
• https://bdu.fstec.ru/vul/2015-04932 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2007:0703 · Nota
• https://bdu.fstec.ru/vul/2015-05973 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-05972 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2007:0540 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm · Nota
• http://secunia.com/advisories/28320 · Nota
• http://secunia.com/advisories/28319 · Nota
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00214.html · Aviso do Fabricante
• http://secunia.com/advisories/27588 · Nota