Detections
Analytics
OpenSSH < 6.9 Multiple Vulnerabilities
high Nessus Plugin ID 84638
Language:
Synopsis
The SSH server running on the remote host is affected by multiple vulnerabilities.Description
According to its banner, the version of OpenSSH running on the remote host is prior to 6.9. It is, therefore, affected by the following vulnerabilities :- A flaw exists within the x11_open_helper() function in the 'channels.c' file that allows connections to be permitted after 'ForwardX11Timeout' has expired. A remote attacker can exploit this to bypass timeout checks and XSECURITY restrictions. (CVE-2015-5352)
- Various issues were addressed by fixing the weakness in agent locking by increasing the failure delay, storing the salted hash of the password, and using a timing-safe comparison function.
- An out-of-bounds read error exists when handling incorrect pattern lengths. A remote attacker can exploit this to cause a denial of service or disclose sensitive information in the memory.
- An out-of-bounds read error exists when parsing the 'EscapeChar' configuration option.
Solution
Upgrade to OpenSSH 6.9 or later.See Also
Plugin Details
Severity: High
ID: 84638
File Name: openssh_69.nasl
Version: 1.8
Type: remote
Family: Misc.
Published: 7/9/2015
Updated: 3/27/2024
Supported Sensors: Nessus
Risk Information
CVSS Score Rationale: Score from a more in depth analysis done by tenable
VPR
Risk Factor: Low
Score: 3.4
CVSS v2
Risk Factor: High
Base Score: 8.5
Temporal Score: 6.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:C
CVSS Score Source: manual
Vulnerability Information
CPE: cpe:/a:openbsd:openssh
Required KB Items: installed_sw/OpenSSH
Exploit Ease: No known exploits are available
Patch Publication Date: 6/30/2015
Vulnerability Publication Date: 7/1/2015
Reference Information
CVE: CVE-2015-5352
BID: 75525