Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.57224
Category:Turbolinux Local Security Tests
Title:Turbolinux TLSA-2005-100 (openssh)
Summary:NOSUMMARY
Description:Description:

The remote host is missing an update to openssh
announced via advisory TLSA-2005-100.

OpenSSH is a FREE version of the SSH protocol suite of network connectivity tools
that increasing numbers of people on the Internet are coming to rely on.
The sshd in OpenSSH, when GSSAPIDelegateCredentials is enabled,
allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods,
which could cause those credentials to be exposed to untrusted users or hosts.

This vulnerability may allow remote users to bypass access control rules.

Solution: Please use the turbopkg (zabom) tool to apply the update.
http://www.securityspace.com/smysecure/catid.html?in=TLSA-2005-100

Risk factor : High

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CAN-2005-2798
BugTraq ID: 14729
http://www.securityfocus.com/bid/14729
HPdes Security Advisory: HPSBUX02090
http://www.securityfocus.com/archive/1/421411/100/0/threaded
HPdes Security Advisory: SSRT051058
http://www.mandriva.com/security/advisories?name=MDKSA-2005:172
http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html
http://www.osvdb.org/19141
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717
http://www.redhat.com/support/errata/RHSA-2005-527.html
SCO Security Bulletin: SCOSA-2005.53
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt
http://securitytracker.com/id?1014845
http://secunia.com/advisories/16686
http://secunia.com/advisories/17077
http://secunia.com/advisories/17245
http://secunia.com/advisories/18010
http://secunia.com/advisories/18406
http://secunia.com/advisories/18507
http://secunia.com/advisories/18661
http://secunia.com/advisories/18717
SuSE Security Announcement: SUSE-SR:2006:003 (Google Search)
http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html
https://usn.ubuntu.com/209-1/
http://www.vupen.com/english/advisories/2006/0144
XForce ISS Database: hpux-secure-shell-dos(24064)
https://exchange.xforce.ibmcloud.com/vulnerabilities/24064
CopyrightCopyright (c) 2006 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.