Test ID:	1.3.6.1.4.1.25623.1.0.10954
Category:	Gain a shell remotely
Title:	OpenSSH AFS/Kerberos ticket/token passing
Summary:	OpenSSH is prone to a buffer overflow vulnerability.
Description:	Summary: OpenSSH is prone to a buffer overflow vulnerability. Vulnerability Insight: A buffer overflow exists in the daemon if AFS is enabled on the remote system, or if the options KerberosTgtPassing or AFSTokenPassing are enabled. Even in this scenario, the vulnerability may be avoided by enabling UsePrivilegeSeparation. Affected Software/OS: Versions prior to 2.9.9 are vulnerable to a remote root exploit. Versions prior to 3.2.1 are vulnerable to a local root exploit. Solution: Upgrade to the latest version of OpenSSH CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0575 BugTraq ID: 4560 http://www.securityfocus.com/bid/4560 Bugtraq: 20020419 OpenSSH 2.2.0 - 3.1.0 server contains a locally exploitable buffer overflow (Google Search) http://online.securityfocus.com/archive/1/268718 Bugtraq: 20020420 OpenSSH Security Advisory (adv.token) (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-04/0298.html Bugtraq: 20020426 Revised OpenSSH Security Advisory (adv.token) (Google Search) http://online.securityfocus.com/archive/1/269701 Bugtraq: 20020429 TSLSA-2002-0047 - openssh (Google Search) http://archives.neohapsis.com/archives/bugtraq/2002-04/0394.html Bugtraq: 20020517 OpenSSH 3.2.2 released (fwd) (Google Search) http://marc.info/?l=bugtraq&m=102167972421837&w=2 Caldera Security Advisory: CSSA-2002-022.2 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-022.2.txt http://www.osvdb.org/781 http://marc.info/?l=vuln-dev&m=101924296115863&w=2 http://www.iss.net/security_center/static/8896.php
Copyright	Copyright (C) 2005 Thomas Reinke

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.