ssh secure shell for servers 3.1 vulnerabilities and exploits

(subscribe to this query)

SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote malicious users to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.

Ssh Secure Shell For Servers 3.0 Ssh Secure Shell For Servers 3.0.1 Ssh Secure Shell For Servers 3.1 Ssh Secure Shell For Servers 3.1.1

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 up to and including 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows malicious users to gain certain privileges.

Ssh Ssh2 2.4 Ssh Ssh2 2.5 Ssh Ssh2 3.1.4 Ssh Ssh2 3.2 Ssh Ssh2 3.0 Ssh Ssh2 3.0.1 Ssh Ssh2 3.2.1 Ssh Ssh2 2.2 Ssh Ssh2 2.3 Ssh Ssh2 3.1.2 Ssh Ssh2 3.1.3 Ssh Ssh2 2.0.13 Ssh Ssh2 2.1 Ssh Ssh2 3.1 Ssh Ssh2 3.1.1

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1175 Github repositories28 Articles

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...

21 Github repositories

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with...

196 Github repositories9 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook