DeutschShown in its original language — a full translation is planned for a future version.
OpenSSH: Schwachstelle ermöglicht Privilegieneskalation
view advisory published 2016-04-17
Ein lokaler Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um seine Privilegien zu erhöhen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-8325US | high7.8OT elevated | — | ||
The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home dire… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2016-2588 vom 2016-11-09external
- Oracle Linux Security Advisory ELSA-2017-0641 vom 2017-03-28external
- NetBSD 7.0.1 Releaseexternal
- OpenSSH 7.3 release notes vom 2016-08-01external
- Ubuntu Security Notice USN-2966-1 vom 2016-05-10external
- Red Hat Security Advisory RHSA-2016:2588-1 vom 2016-11-03external
- Red Hat Security Advisory RHSA-2017:0641-1 vom 2017-03-21external
- Palo Alto Networks Security Advisory PAN-SA-2020-0005 vom 2020-05-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan