PT-2015-7915 · Openssh · Openssh

Published 2015-08-21 · Updated 2015-08-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions openssh (affected versions not specified)

Description A privilege separation weakness related to PAM support was found, allowing attackers to impersonate other users. This issue can be exploited by attackers who can compromise the pre-authentication process for remote code execution and have valid credentials on the host. Additionally, a use-after-free bug was discovered, which is also exploitable by attackers who can compromise the pre-authentication process for remote code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0321

Affected Products

Openssh

References · 5

• https://advisories.mageia.org/MGASA-2015-0321.html · Security Note
• https://lists.fedoraproject.org/pipermail/package-announce/2015-August/164224.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0321 · Vendor Advisory
• https://bugs.mageia.org/show_bug.cgi?id=16617 · Note
• http://openwall.com/lists/oss-security/2015/08/11/9 · Note