OpenSSH Kerberos Arbitrary Privilege...

- AV AC AU C I A
发布: 2001-11-19
修订: 2025-04-13

OpenSSH is a freely available implementation of the SSH client-server protocol. It is distributed and maintained by the OpenSSH team. A problem with the software has been discovered that could allow remote users to gain unauthorized access. The level of privilege that can be obtained through this vulnerability is currently unknown. The problem is related to the Kerberos V authentication handling by the implementation. Under some circumstances, it may be possible for an arbitrary user to gain access to a system. The only affected OpenSSH implementations are those that have compiled into the program the Kerberos V compatibility code. This is not usually built with a default compilation of OpenSSH.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息