Red Hat Security AdvisoryRHSA-2006:0298
openssh security update
Released 2006-07-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 openssh-3.6.1p2-33.30.9, openssh-3.6.1p2-33.30.9.i386, openssh-askpass-3.6.1p2-33.30.9 +7
- Red Hat Enterprise Linux AS version 3 openssh-3.6.1p2-33.30.9, openssh-3.6.1p2-33.30.9.i386, openssh-3.6.1p2-33.30.9.ia64 +17
- Red Hat Enterprise Linux ES version 3 openssh-3.6.1p2-33.30.9, openssh-3.6.1p2-33.30.9.i386, openssh-3.6.1p2-33.30.9.ia64 +12
- Red Hat Enterprise Linux WS version 3 openssh-3.6.1p2-33.30.9, openssh-3.6.1p2-33.30.9.i386, openssh-3.6.1p2-33.30.9.ia64 +12
Fixes 2 records
Priority MEDIUM 42
OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a ho…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05766 · Published 2003-06-10 · Fixed
Priority LOW 22
scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.0047 · Published 2006-01-25 · Fixed
