Test ID:	1.3.6.1.4.1.25623.1.0.807574
Category:	Privilege escalation
Title:	OpenSSH <= 7.2p2 Privilege Escalation Vulnerability (May 2016)
Summary:	OpenSSH is prone to a privilege escalation vulnerability.
Description:	Summary: OpenSSH is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to an error in 'do_setup_env function' in the 'session.c' script in sshd which trigger a crafted environment for the /bin/login program when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories. Vulnerability Impact: Successfully exploiting this issue will allow local users to gain privileges. Affected Software/OS: OpenSSH versions through 7.2p2. Solution: Update to version 7.2p2-3 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8325 BugTraq ID: 86187 http://www.securityfocus.com/bid/86187 Debian Security Information: DSA-3550 (Google Search) http://www.debian.org/security/2016/dsa-3550 https://security.gentoo.org/glsa/201612-18 RedHat Security Advisories: RHSA-2016:2588 http://rhn.redhat.com/errata/RHSA-2016-2588.html RedHat Security Advisories: RHSA-2017:0641 http://rhn.redhat.com/errata/RHSA-2017-0641.html http://www.securitytracker.com/id/1036487
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.