PT-2015-7915 · Openssh · Openssh

Publicado 2015-08-21 · Atualizado 2015-08-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions openssh (affected versions not specified)

Description A privilege separation weakness related to PAM support was found, allowing attackers to impersonate other users. This issue can be exploited by attackers who can compromise the pre-authentication process for remote code execution and have valid credentials on the host. Additionally, a use-after-free bug was discovered, which is also exploitable by attackers who can compromise the pre-authentication process for remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0321

Produtos afetados

Openssh

Referências · 5

• https://bugs.mageia.org/show_bug.cgi?id=16617 · Nota
• https://advisories.mageia.org/MGASA-2015-0321.html · Nota de Segurança
• https://lists.fedoraproject.org/pipermail/package-announce/2015-August/164224.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/08/11/9 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0321 · Aviso do Fabricante