OpenSSH < 3.0.2 Multiple Vulnerabilities

high Nessus Plugin ID 10823

Language:

Synopsis

The SSH service running on the remote host has multiple vulnerabilities.

Description

You are running a version of OpenSSH which is older than 3.0.2.
Versions prior than 3.0.2 have the following vulnerabilities :

- When the UseLogin feature is enabled, a local user could export environment variables, resulting in command execution as root. The UseLogin feature is disabled by default. (CVE-2001-0872)

- A local information disclosure vulnerability.
Only FreeBSD hosts are affected by this issue.
(CVE-2001-1029)

Solution

Upgrade to OpenSSH 3.0.2 or apply the patch for prior versions. (Available at: ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH)

Plugin Details

Severity: High

ID: 10823

File Name: openssh_uselogin_environment.nasl

Version: 1.33

Type: remote

Family: Misc.

Published: 12/10/2001

Updated: 3/27/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:openbsd:openssh

Required KB Items: installed_sw/OpenSSH

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 12/3/2001

Vulnerability Publication Date: 12/3/2001

Reference Information

CVE: CVE-2001-0872, CVE-2001-1029

BID: 3614

Detections

Analytics