PT-2015-3402 · Openssh+6 · Openssh+6
Jann Horn
·
Publicado
2015-07-09
·
Atualizado
2024-07-08
·
CVE-2015-5352
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
OpenSSH versions prior to 6.9
Description
The issue is related to the x11 open helper function in channels.c in ssh, which lacks a check of the refusal deadline for X connections when ForwardX11Trusted mode is not used. This makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window. The vulnerability is also associated with errors in privilege management, which can allow a remote attacker to impact the integrity of protected information.
Recommendations
For OpenSSH versions prior to 6.9, consider disabling the x11 open helper function as a temporary workaround until a patch is available. Restrict access to X connections when ForwardX11Trusted mode is not used to minimize the risk of exploitation. Avoid using the ForwardX11Trusted mode until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Ibm Aix
Openssh
Red Hat
Suse
Ubuntu