OpenSSH AcceptEnv Wildcard Processing Vulnerability

A vulnerability has been identified in OpenSSH, which can be exploited by a remote authenticated user to bypass environment restrictions in certain cases.

When configured for environment passing (not the default), the software does not properly process wildcard characters on AcceptEnv lines in the 'sshd_config' configuration file. A remote user may be able to supply specially crafted parameter values to bypass environment restrictions and set certain environment variables.