(HP Issues Fix for HP-UX Secure Shell) OpenSSH May Unexpectedly Activate GatewayPorts and Also May Disclose GSSAPI Credentials in Certain Cases
|
|
SecurityTracker Alert ID: 1015458 |
|
SecurityTracker URL: http://securitytracker.com/id/1015458
|
|
CVE Reference:
CVE-2005-2797, CVE-2005-2798
(Links to External Site)
|
Updated: Jul 20 2006
|
Original Entry Date: Jan 10 2006
|
Impact:
Disclosure of authentication information, Host/resource access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
Two vulnerabilities were reported in OpenSSH. GatewayPorts may be unexpectedly activated. GSSAPI authentication credentials may be disclosed to untrusted remote users.
If no listen address is specified for dynamic port forwardings (forwarding with the '-D' flag), GatewayPorts may be incorrectly activated. As a result, a remote user may be able to access ports on the target system. This flaw was introduced in OpenSSH version 4.0.
GSSAPI credentials can be delegated to users that can request to login with authentication methods other than GSSAPI authentication. As a result, credentials may be inadvertently exposed to untrusted remote users in certain situations.
|
Impact:
GatewayPorts may be unexpectedly activated.
GSSAPI authentication credentials may be disclosed to untrusted remote users.
|
Solution:
HP has issued a fix for HP-UX Secure Shell, available at:
http://software.hp.com
HP-UX B.11.00 - HP-UX Secure Shell A.04.20.004
HP-UX B.11.04 - PHSS_34566 or PHSS_34567
HP-UX B.11.11 - HP-UX Secure Shell A.04.20.004
HP-UX B.11.23 - HP-UX Secure Shell A.04.20.005
|
Vendor URL: www.openssh.org/ (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
UNIX (HP/UX)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Tue, 10 Jan 2006 01:32:14 -0500
Subject: HPSBUX02090 SSRT051058 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS)
|
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00589050
CVE-2005-2096
CVE-2005-2798
|
|
