Red Hat Security AdvisoryRHSA-2007:0540
openssh security and bug fix update
Released 2007-11-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) openssh-4.3p2-24.el5, openssh-4.3p2-24.el5.i386, openssh-4.3p2-24.el5.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) openssh-4.3p2-24.el5, openssh-4.3p2-24.el5.i386, openssh-askpass-4.3p2-24.el5 +5
Fixes 2 records
Priority LOW 28
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02913 · Published 2006-09-27 · Fixed
Priority LOW 25
Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafte…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02342 · Published 2007-10-18 · Fixed
