Test Kennung:	1.3.6.1.4.1.25623.1.0.807574
Kategorie:	Privilege escalation
Titel:	OpenSSH <= 7.2p2 Privilege Escalation Vulnerability (May 2016)
Zusammenfassung:	OpenSSH is prone to a privilege escalation vulnerability.
Beschreibung:	Summary: OpenSSH is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to an error in 'do_setup_env function' in the 'session.c' script in sshd which trigger a crafted environment for the /bin/login program when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories. Vulnerability Impact: Successfully exploiting this issue will allow local users to gain privileges. Affected Software/OS: OpenSSH versions through 7.2p2. Solution: Update to version 7.2p2-3 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8325 BugTraq ID: 86187 http://www.securityfocus.com/bid/86187 Debian Security Information: DSA-3550 (Google Search) http://www.debian.org/security/2016/dsa-3550 https://security.gentoo.org/glsa/201612-18 RedHat Security Advisories: RHSA-2016:2588 http://rhn.redhat.com/errata/RHSA-2016-2588.html RedHat Security Advisories: RHSA-2017:0641 http://rhn.redhat.com/errata/RHSA-2017-0641.html http://www.securitytracker.com/id/1036487
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.