CVE-2014-2532
CVE-2014-2532
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
CVSS 4.2 · Media · EPSS 4,8% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
openssh Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:6.6p1-1
Actualiza a 1:6.6p1-1
openssh Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:6.6p1-1
Actualiza a 1:6.6p1-1
openssh Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:6.6p1-1
Actualiza a 1:6.6p1-1
Fuentes originales
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- http://secunia.com/advisories/59855
- http://secunia.com/advisories/57574
- http://advisories.mageia.org/MGASA-2014-0143.html
- http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
- http://marc.info/?l=bugtraq&m=141576985122836&w=2
- http://secunia.com/advisories/57488
- http://www.mandriva.com/security/advisories?name=MDVSA-2015:095
- http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
- http://secunia.com/advisories/59313
- https://support.apple.com/HT205267
- http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html
- http://www.debian.org/security/2014/dsa-2894
- http://rhn.redhat.com/errata/RHSA-2014-1552.html
- http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc
- http://www.securitytracker.com/id/1029925
- http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2
- http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
- http://www.ubuntu.com/usn/USN-2155-1
- http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91986
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:068
- http://www.securityfocus.com/bid/66355
- https://nvd.nist.gov/vuln/detail/CVE-2014-2532