Test Kennung:	1.3.6.1.4.1.25623.1.0.10472
Kategorie:	Gain a shell remotely
Titel:	SSH Kerberos issue
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: You are running a version of SSH which is older than (or as old as) version 1.2.27. If you compiled ssh with kerberos support, then an attacker may eavesdrop your users kerberos tickets, as sshd will set the environment variable KRB5CCNAME to 'none', so kerberos tickets will be stored in the current working directory of the user, as 'none'. If you have nfs/smb shared disks, then an attacker may eavesdrop the kerberos tickets of your users using this flaw. *** If you are not using kerberos, then *** ignore this warning. Solution : use ssh 1.2.28 or newer Risk factor : High
Querverweis:	BugTraq ID: 1426 Common Vulnerability Exposure (CVE) ID: CVE-2000-0575 http://www.securityfocus.com/bid/1426 Bugtraq: 20000630 Kerberos security vulnerability in SSH-1.2.27 (Google Search) http://marc.info/?l=bugtraq&m=96256265914116&w=2 XForce ISS Database: ssh-kerberos-tickets-disclosure(4903) https://exchange.xforce.ibmcloud.com/vulnerabilities/4903
Copyright	This script is Copyright (C) 2000 Renaud Deraison

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.