CVE-2015-6563

Summary

CVE	CVE-2015-6563
State	PUBLISHED
Assigner	mitre
Source Priority	CVE Program / NVD first with legacy fallback
Published	2015-08-24 01:59:00 UTC
Updated	2026-05-06 22:30:45 UTC
Description	The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

Risk And Classification

Primary CVSS: v2.0 1.9 from [email protected]

AV:L/AC:M/Au:N/C:N/I:P/A:N

Problem Types: CWE-20 | n/a

CVSS v2.0 Breakdown

Access Vector

Local

Access Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

AV:L/AC:M/Au:N/C:N/I:P/A:N

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Operating System	Apple	Mac Os X	All	All	All	All
Application	Openbsd	Openssh	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
About the security content of OS X El Capitan 10.11.1, Security Update 2015-004 Yosemite, and Security Update 2015-007 Mavericks - Apple Support	af854a3a-2127-422b-91ae-364da2661108	support.apple.com
[SECURITY] [DLA 1500-1] openssh security update	af854a3a-2127-422b-91ae-364da2661108	lists.debian.org
Red Hat Customer Portal	af854a3a-2127-422b-91ae-364da2661108	rhn.redhat.com
OpenSSH: Multiple vulnerabilities (GLSA 201512-04) — Gentoo Security	af854a3a-2127-422b-91ae-364da2661108	security.gentoo.org
oss-security - Re: CVE request - OpenSSH 6.9 PAM privilege separation vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	www.openwall.com
Don't resend username to PAM; it already has it. · openssh/openssh-portable@d4697fe · GitHub	af854a3a-2127-422b-91ae-364da2661108	github.com
[SECURITY] Fedora 21 Update: openssh-6.6.1p1-16.fc21	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org
Oracle Solaris Bulletin - January 2016	af854a3a-2127-422b-91ae-364da2661108	www.oracle.com
OpenSSH PAM Support Multiple Remote Code Execution Vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com
www.openssh.com/txt/release-7.0	af854a3a-2127-422b-91ae-364da2661108	www.openssh.com	Vendor Advisory
Full Disclosure: BFS-SA-2015-002: OpenSSH PAM Privilege Separation Vulnerabilities	af854a3a-2127-422b-91ae-364da2661108	seclists.org
CVE-2015-6563 OpenSSH Vulnerability in NetApp Products \| NetApp Product Security	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com
[security-announce] SUSE-SU-2015:1581-1: important: Security update for	af854a3a-2127-422b-91ae-364da2661108	lists.opensuse.org
cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf	af854a3a-2127-422b-91ae-364da2661108	cert-portal.siemens.com
Oracle Linux Bulletin - October 2015	af854a3a-2127-422b-91ae-364da2661108	www.oracle.com
Oracle Linux Bulletin - April 2016	af854a3a-2127-422b-91ae-364da2661108	www.oracle.com
Broadcom Inc. \| Connecting Everything	af854a3a-2127-422b-91ae-364da2661108	www.broadcom.com
APPLE-SA-2015-10-21-4 OS X El Capitan 10.11.1 and Security Update 2015-007	af854a3a-2127-422b-91ae-364da2661108	lists.apple.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

690300 Free Berkeley Software Distribution (FreeBSD) Security Update for openssh (2920c449-4850-11e5-825f-c80aa9043978)