Test Kennung:	1.3.6.1.4.1.25623.1.0.11848
Kategorie:	Gain root remotely
Titel:	Portable SSH OpenSSH < 3.7.1p2
Zusammenfassung:	NOSUMMARY
Beschreibung:	Description: You are running OpenSSH 3.7p1 or 3.7.1p1. These versions are vulnerable to a flaw in the way they handle PAM authentication and may allow an attacker to gain a shell on this host. *** Note that Nessus did not detect whether PAM is being enabled *** in the remote sshd or not, so this might be a false positive. Solution : Upgrade to OpenSSH 3.7.1p2 or disable PAM support in sshd_config Risk factor : High
Querverweis:	BugTraq ID: 8677 Common Vulnerability Exposure (CVE) ID: CVE-2003-0786 http://www.securityfocus.com/bid/8677 Bugtraq: 20030923 Multiple PAM vulnerabilities in portable OpenSSH (Google Search) http://www.securityfocus.com/archive/1/338617 Bugtraq: 20030923 Portable OpenSSH 3.7.1p2 released (Google Search) http://www.securityfocus.com/archive/1/338616 CERT/CC vulnerability note: VU#602204 http://www.kb.cert.org/vuls/id/602204 http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/010812.html Common Vulnerability Exposure (CVE) ID: CVE-2003-0787 CERT/CC vulnerability note: VU#209807 http://www.kb.cert.org/vuls/id/209807
Copyright	This script is Copyright (C) 2003 Tenable Network Security

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.