VUPEN Security - OpenBSD Security Update Fixes OpenSSH Security Bypass Issue / Exploit (Security Advisories)

	Contact \| Site en Français

Vulnerabilities & Threats

VUPEN Security Advisories

Linux Security Advisories

Threat Watch Blog

Zero-Day Monitor

Search Engine

Mailing List & RSS

>> OpenBSD Security Update Fixes OpenSSH Security Bypass Issue

Title : OpenBSD Security Update Fixes OpenSSH Security Bypass Issue
VUPEN ID : VUPEN/ADV-2008-1036
CVE ID : GENERIC-MAP-NOMATCH
Rated as : Low Risk

Remotely Exploitable : No
Locally Exploitable : Yes
Release Date : 2008-03-31

Technical Description

A weakness has been identified in OpenBSD, which could be exploited by local attackers to bypass security restrictions. This issue is caused by an error in OpenSSH. For additional information, see : VUPEN/ADV-2008-1035

Affected Products

OpenBSD version 4.1
OpenBSD version 4.2
OpenBSD version 4.3

Solution

Apply patch for OpenBSD 4.1 :
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.1/common/015_openssh.patch

Apply patch for OpenBSD 4.2 :
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/010_openssh.patch

Apply patch for OpenBSD 4.3 :
ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/001_openssh.patch

References

http://www.vupen.com/english/advisories/2008/1036
http://www.openbsd.org/errata43.html
http://www.openbsd.org/errata42.html
http://www.openbsd.org/errata41.html

Credits

Vulnerability reported by the vendor.

ChangeLog

2008-03-31 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

Latest News

>> 2009-07-06