PT-2013-6355 · Openssh+4 · Openssh+4
Markus Friedl
·
Publicado
1970-01-01
·
Atualizado
2024-07-08
·
CVE-2013-4548
CVSS v2.0
6.0
Média
| Vetor | AV:N/AC:M/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions 6.2 through 6.3
Description
The issue allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address. This is due to the mm newkeys from blob function in monitor wrap.c not properly initializing memory for a MAC context data structure when an AES-GCM cipher is used. The vulnerability can be exploited remotely by an attacker who has passed the authentication procedure, potentially leading to a breach of confidentiality, integrity, and availability of protected information.
Recommendations
For OpenSSH versions 6.2 through 6.3, consider updating to a version where this issue is fixed, as the current version allows for the bypass of important security restrictions.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Hp-Ux
Ibm Aix
Openssh
Suse