Red Hat Security AdvisoryRHSA-2007:0703
openssh security and bug fix update
Released 2007-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openssh-3.9p1-8.RHEL4.24, openssh-3.9p1-8.RHEL4.24.i386, openssh-3.9p1-8.RHEL4.24.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 openssh-3.9p1-8.RHEL4.24, openssh-3.9p1-8.RHEL4.24.i386, openssh-askpass-3.9p1-8.RHEL4.24 +7
- Red Hat Enterprise Linux ES version 4 openssh-3.9p1-8.RHEL4.24, openssh-3.9p1-8.RHEL4.24.i386, openssh-3.9p1-8.RHEL4.24.ia64 +12
- Red Hat Enterprise Linux WS version 4 openssh-3.9p1-8.RHEL4.24, openssh-3.9p1-8.RHEL4.24.i386, openssh-3.9p1-8.RHEL4.24.ia64 +12
Fixes 2 records
Priority LOW 28
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02913 · Published 2006-09-27 · Fixed
Priority LOW 25
Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafte…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02342 · Published 2007-10-18 · Fixed
