漏洞标题
N/A
漏洞描述信息
在OpenSSH 4.5之前,sshd 权限分离监控器中的未指定漏洞可能导致验证 authentication 是否成功减弱,这可能导致攻击者绕过验证。注意:截至20061108年,据信只有通过利用未受特权进程的漏洞才能利用此问题。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
OpenSSH sshd Privilege Separation Monitor 未明漏洞
漏洞描述信息
OpenSSH的4.5之前版本中的sshd Privilege Separation Monitor存在未明漏洞,导致系统对已经成功的认证的验证更弱,可能让攻击者绕过认证。注:自20061108起,认为此问题只有利用未授权过程中的漏洞才能被利用,而这种过程还未知存在与否。
CVSS信息
N/A
漏洞类别
授权问题