OpenSSH Security Restriction Bypass Vulnerability

Last Update Date: 2 Sep 2015 Release Date: 26 Aug 2015 4176 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

A vulnerability was identified in OpenSSH. A remote authenticated user can bypass security restrictions.

A remote authenticated root user can bypass the 'PermitRootLogin=prohibit-password' security control and login to the target system via SSH.

Impact

Security Restriction Bypass

System / Technologies affected

Version 7.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (7.1).

Vulnerability Identifier

No CVE information is available

Source

SecurityTracker