Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

openbsd openssh 4.7p1 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2010-4478
OpenSSH 5.6 and previous versions, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote malicious users to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values ...
Openbsd Openssh 5.4Openbsd Openssh 3.8Openbsd Openssh 3.8.1p1Openbsd Openssh 4.3p2Openbsd Openssh 3.2.2Openbsd Openssh 3.1Openbsd Openssh 5.5Openbsd Openssh 3.0.2p1Openbsd Openssh 1.5.8Openbsd Openssh 5.3Openbsd Openssh 4.1Openbsd Openssh 3.8.1Openbsd Openssh 2.1.1Openbsd Openssh 3.7.1p2Openbsd Openssh 4.8Openbsd Openssh 4.9Openbsd Openssh 3.2.3p1Openbsd Openssh 3.1p1Openbsd Openssh 2.5.1Openbsd Openssh 2.9.9p2Openbsd Openssh 3.6.1p2Openbsd Openssh 3.9
4
CVSSv2
CVE-2010-4755
The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and previous versions, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memor...
Openbsd Openssh 1.2.27Openbsd Openssh 1.2.3Openbsd Openssh 1.3Openbsd Openssh 1.5Openbsd Openssh 2.9.9p2Openbsd Openssh 2.9p1Openbsd Openssh 2.9p2Openbsd Openssh 3.0Openbsd Openssh 3.0.1Openbsd Openssh 3.4Openbsd Openssh 3.4p1Openbsd Openssh 3.5Openbsd Openssh 3.5p1Openbsd Openssh 3.9.1p1Openbsd Openssh 4.0Openbsd Openssh 4.0p1Openbsd Openssh 4.1Openbsd Openssh 4.9Openbsd OpensshOpenbsd Openssh 5.7Openbsd Openssh 5.6Openbsd Openssh 1.2.1
7.5
CVSSv2
CVE-2007-4752
ssh in OpenSSH prior to 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows malicious users to violate intended policy and gain privileges by causing an X client to be treated as trusted.
Openbsd Openssh 4.3p2Openbsd Openssh 4.3p1Openbsd Openssh 4.0Openbsd Openssh 4.3Openbsd Openssh 4.2p1Openbsd Openssh 4.4p1Openbsd Openssh 4.4Openbsd Openssh 4.1Openbsd Openssh 4.0p1Openbsd OpensshOpenbsd Openssh 4.5Openbsd Openssh 4.2Openbsd Openssh 4.1p1
6.9
CVSSv2
CVE-2008-1483
OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emac...
Openbsd Openssh 4.3p2
2.6
CVSSv2
CVE-2008-5161
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 up to and including 4.4.11, 5.0 up to and including 5.2.4, and 5.3 up to and including 5.3.8; Client and Server and ConnectSecure 6.0 up to and including 6.0.4; Server for Linux on IBM System...
Openbsd Openssh 4.7p1Ssh Tectia Client 4.0Ssh Tectia Client 4.0.1Ssh Tectia Client 4.3.1Ssh Tectia Client 4.3.1jSsh Tectia Client 4.3.2Ssh Tectia Client 4.3.8kSsh Tectia Client 4.3.9kSsh Tectia Client 4.4.7Ssh Tectia Client 4.4.8Ssh Tectia Server 4.3Ssh Tectia Server 4.3.1Ssh Tectia Server 4.4.2Ssh Tectia Server 4.4.4Ssh Tectia Server 4.4.10Ssh Tectia Server 4.4.11Ssh Tectia Connector 4.3.5Ssh Tectia Connector 4.4.0Ssh Tectia Connector 5.0.0Ssh Tectia Connector 5.0.1Ssh Tectia Client 4.0.5Ssh Tectia Client 4.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook