Computer Security

OpenSSH protection bypass

back  news / advisories / software / search / exploits  forward
[EN] securityvulns.ru no-pyccku


OpenSSH protection bypass
Published:27.03.2014
Source:
SecurityVulns ID:13632
Type:remote
Threat Level:
5/10
Description:Invalid wildcard expressions parsing.
CVE:CVE-2014-2532 (sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.)
Original documentdocumentUBUNTU, [USN-2155-1] OpenSSH vulnerability (27.03.2014)
About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod