CVE-2012-0814

Related Files

Gentoo Linux Security Advisory 201405-06

Posted May 12, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201405-6 - Multiple vulnerabilities have been found in OpenSSH, the worst of which may allow remote attackers to execute arbitrary code. Versions less than 6.6_p1-r1 are affected.

tags | advisory, remote, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2008-5161, CVE-2010-4478, CVE-2010-4755, CVE-2010-5107, CVE-2011-5000, CVE-2012-0814, CVE-2014-2532

SHA-256 | fe1b9df26b1a25aa71eeff1f99186e2674ad6030343ed863a7fff0e2837a9529

Download | Favorite | View

EMC VPLEX GeoSynchrony 5.2.1 Traversal / Session Timeout

Posted Mar 27, 2014

Site emc.com

EMC VPLEX GeoSynchrony versions 4.0 through 5.2.1 suffer from path traversal, timeout validity, session fixation, and various other vulnerabilities.

tags | advisory, vulnerability

advisories | CVE-2002-2443, CVE-2011-1044, CVE-2011-3389, CVE-2011-4110, CVE-2012-0814, CVE-2012-2136, CVE-2012-5166, CVE-2013-1667, CVE-2014-0632, CVE-2014-0633, CVE-2014-0634, CVE-2014-0635

SHA-256 | 865ebcefce882874598ff43ecc2a95087b307183385a9a725bb5ad0baf892e95

Download | Favorite | View

Mandriva Linux Security Advisory 2013-022

Posted Mar 13, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-022 - The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory. The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service by periodically making many new TCP connections. The updated packages have been patched to correct these issues.

tags | advisory, remote, denial of service, shell, tcp

systems | linux, mandriva

advisories | CVE-2010-5107, CVE-2012-0814

SHA-256 | bee473f9707063a23fbf49f1f2986f75bfe44988e5231b688428c1c9f062130b

Download | Favorite | View