SSH 1.2.27 Kerberos Ticket Cache Exposure Vulnerability
BID:1426
Info
SSH 1.2.27 Kerberos Ticket Cache Exposure Vulnerability
| Bugtraq ID: | 1426 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Jul 05 2000 12:00AM |
| Updated: | Jul 05 2000 12:00AM |
| Credit: | This vulnerability was posted to the Bugtraq mailing list on July 5, 2000 by Richard E. Silverman <[email protected]> |
| Vulnerable: |
SSH Communications Security SSH 1.2.27 |
| Not Vulnerable: |
SSH Communications Security SSH 1.2.30 SSH Communications Security SSH 1.2.29 SSH Communications Security SSH 1.2.28 |
Discussion
Exploit / POC
SSH 1.2.27 Kerberos Ticket Cache Exposure Vulnerability
See discussion for exploit information.
See discussion for exploit information.
Solution / Fix
SSH 1.2.27 Kerberos Ticket Cache Exposure Vulnerability
Solution:
This vulnerability is fixed in versions of SSH 1.2 after 1.2.27. At the time of writing, this includes 1.2.28, 1.2.29 and 1.2.30.
SSH Communications Security SSH 1.2.27
Solution:
This vulnerability is fixed in versions of SSH 1.2 after 1.2.27. At the time of writing, this includes 1.2.28, 1.2.29 and 1.2.30.
SSH Communications Security SSH 1.2.27
-
SSH Communications ssh 1.2.30
http://www.ssh.com