V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2019-03788
BDU
MediumConfirmedExploit available

Уязвимость средства криптографической защиты OpenSSH вызвана ошибками при проверке имени каталога scp.c в клиенте scp. Эксплуатация уязвимо…

CVSS
5.9
Medium
EPSS
0.00
p0
Published
2019-01-01
Updated
2019-01-01
Description

Уязвимость средства криптографической защиты OpenSSH вызвана ошибками при проверке имени каталога scp.c в клиенте scp. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, изменить права доступа к целевому каталогу используя имя файла «.» или пустое имя файла

Tags · CWE
Pre-auth
Affected products
Novell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestrationNovell inc. Openstack cloud magnum orchestration
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Timeline
2019-01-01
Published
2019-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: H
High (H)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: H
High (H)
Availability Impact
A: N
None (N)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
46193
exploitdb · https://www.exploit-db.com/exploits/46193
Enterprise
46516
exploitdb · https://www.exploit-db.com/exploits/46516
Enterprise
Affected products
Novell
Suse Linux Enterprise Module For BasesystemSuse Enterprise StorageSuse Openstack CloudSuse Linux Enterprise Point Of SaleSuse Linux Enterprise Module For Open Buildservice Development ToolsSuse Linux Enterprise Module For Desktop ApplicationsSuse Caas PlatformSuse Linux Enterprise Module For Server ApplicationsOpenstack Cloud Magnum Orchestration
Openbsd Project
Openssh
Мартин Прикрыл
Winscp
ProductVendorStatus
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
openstack cloud magnum orchestrationnovell inc.Tracked
Showing first 20 of 476
Source databases
BDU
Related vulnerabilities
CVE-2019-6111
External references
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-6111@http://www.exploit-db.com/exploits/46193/@https://www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html@https://nvd.nist.gov/vuln/detail/CVE-2019-6111@https://www.exploit-db.com/exploits/46193@https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c@https://www.debian.org/security/2019/dsa-4387@https://people.canonical.com/~ubuntu-security/cve/2019/CVE-2019-6111.html@https://www.suse.com/security/cve/CVE-2019-6111/@https://access.redhat.com/security/cve/cve-2019-6111@https://wiki.astralinux.ru/pages/viewpage.action?pageId=104498138@https://wiki.astralinux.ru/pages/viewpage.action?pageId=117998111@https://wiki.astralinux.ru/astra-linux-se15-bulletin-20201201SE15@https://security.paloaltonetworks.com/PAN-SA-2020-0002@https://altsp.su/obnovleniya-bezopasnosti/