PT-2007-4391 · Openbsd+1 · Openssh+1

Tomas Mraz · Published 2007-10-18 · Updated 2017-10-11 · CVE-2007-3102

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: OpenSSH version 4.3p2

Description: The issue allows remote attackers to write arbitrary characters to an audit log via a crafted username. This is due to an unspecified vulnerability in the linux audit record event function.

Recommendations: For OpenSSH version 4.3p2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3102

RHSA-2007:0540

RHSA-2007:0555

RHSA-2007:0703

RHSA-2007:0737

RHSA-2007_0540

RHSA-2007_0555

RHSA-2007_0703

RHSA-2007_0737

Affected Products

Openssh

Red Hat

References · 31

• http://redhat.com/support/errata/RHSA-2007-0703.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04932 · Security Note
• https://bdu.fstec.ru/vul/2015-05973 · Security Note
• https://bdu.fstec.ru/vul/2015-05972 · Security Note
• https://redhat.com/archives/fedora-package-announce/2007-October/msg00214.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3102 · Security Note
• https://bdu.fstec.ru/vul/2015-05974 · Security Note
• https://bdu.fstec.ru/vul/2015-06021 · Security Note
• https://bdu.fstec.ru/vul/2015-06024 · Security Note
• http://secunia.com/advisories/27235 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0540.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09537 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0737.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0555.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2006-5052 · Note