OpenSSH protection bypass

[EN] securityvulns.ru no-pyccku

OpenSSH protection bypass
Published:		27.03.2014
Source:		BUGTRAQ
SecurityVulns ID:		13632
Type:		remote
Threat Level:		5/10
Description:		Invalid wildcard expressions parsing.

CVE:

CVE-2014-2532 (sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.)

Original document

UBUNTU, [USN-2155-1] OpenSSH vulnerability (27.03.2014)