PT-2001-1065 · Openssh+1 · Openssh+1

Published 2001-12-03 · Updated 2024-07-08 · CVE-2001-0816

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions openssh-server versions 2.9p2 through 2.9.8 openssh-clients version 2.9p2 openssh version 2.9p2 openssh-askpass-gnome version 2.9p2 openssh-askpass version 2.9p2

Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely. According to the NVD, OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized keys2 command= restrictions using sftp commands.

Recommendations For openssh-server versions 2.9p2 through 2.9.8, update to version 2.9.9 or later. For openssh-clients version 2.9p2, update to version 2.9.9 or later. For openssh version 2.9p2, update to version 2.9.9 or later. For openssh-askpass-gnome version 2.9p2, update to version 2.9.9 or later. For openssh-askpass version 2.9p2, update to version 2.9.9 or later.

Exploit

Fix

Related Identifiers

ALT-PU-2024-3921

ALT-PU-2024-4077

ALT-PU-2024-4467

ALT-PU-2024-9513

BDU:2015-08183

BDU:2015-08186

BDU:2015-08189

BDU:2015-08192

BDU:2015-08195

CVE-2001-0816

Affected Products

Alt Linux

Openssh

References · 357

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_version.rb · Exploit
• 🔥 https://github.com/Rhynorater/CVE-2018-15473-Exploit · Exploit
• 🔥 https://github.com/zgzhang/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/xaitax/CVE-2024-6387_Check · Exploit
• 🔥 https://github.com/acrono/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/asterictnl-lvdw/CVE-2024-6387 · Exploit
• 🔥 https://github.com/cpandya2909/CVE-2020-15778 · Exploit
• 🔥 https://github.com/lflare/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/epi052/cve-2018-15473 · Exploit
• 🔥 https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2016-6210 · Exploit
• 🔥 https://github.com/Christbowel/CVE-2023-25136 · Exploit
• 🔥 https://github.com/l0n3m4n/CVE-2024-6387 · Exploit
• 🔥 https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker · Exploit
• 🔥 https://github.com/vin01/poc-proxycommand-vulnerable · Exploit