exploits , vulnerabilities , articles , SSH1 SSH Daemon Logging Failure Vulnerability

Title	SSH1 SSH Daemon Logging Failure Vulnerability
Published	2001-02-05-12:00AM
Updated	2001-02-07-01:13PM
Class	Design Error
CVE	CAN-2001-0471
Remote	Yes
Local	No
Credit	This vulnerability was announced to Bugtraq by Jose Nazario <jose@crimelabs.net> in a Crimelabs Security Note on February 5, 2001.
Vulnerable	SSH Communications Security SSH 1.2.30 BSDI BSD/OS 3.1 BSDI BSD/OS 4.0 BSDI BSD/OS 4.0.1 Caldera OpenLinux 2.4 Debian Linux 2.2 Digital (Compaq) TRU64/DIGITAL UNIX 4.0 g Digital (Compaq) TRU64/DIGITAL UNIX 5.0 FreeBSD FreeBSD 3.5.1 FreeBSD FreeBSD 4.2 HP HPUX 10.20 HP HPUX 11.0 HP HPUX 11.11 IBM AIX 4.3.1 IBM AIX 4.3.2 IBM AIX 4.3.3 MandrakeSoft Linux Mandrake 7.0 MandrakeSoft Linux Mandrake 7.1 MandrakeSoft Linux Mandrake 7.2 OpenBSD OpenBSD 2.8 RedHat Linux 6.2 RedHat Linux 7.0 S.u.S.E. Linux 6.4 S.u.S.E. Linux 7.0 SCO eDesktop 2.4 SCO eServer 2.3.1 Sun Solaris 2.5.1 Sun Solaris 2.6 Sun Solaris 7.0 Sun Solaris 8.0
Not Vulnerable
Code	Exploit contributed by Jose Nazario <jose@crimelabs.net> . /data/vulnerabilities/exploits/ssh1-log-exp
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
• 2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
• 2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
• 2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability
• 2009-12-17 IBM WebSphere Application Server Feature Pack for CEA Spoofing Vulnerability
• 2009-12-17 Digital Scribe Cross Site Scripting and SQL Injection Vulnerabilities
• 2009-12-17 WP-Forum WordPress Plugin Multiple SQL Injection Vulnerabilities
• 2009-12-17 Quick Heal AntiVirus Insecure Program File Permissions Local Privilege Escalation Vulnerability
• 2009-12-17 IntelliCom NetBiter webSCADA Multiple Default Password Security Bypass Vulnerabilities
• 2009-12-17 Webmatic Multiple Unspecified SQL Injection and Cross-Site Scripting Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 18 Dec 2009 11:01:44 +0000