- Home
- CVEs with nessus.description==The version of OpenSSH running on the remote host is affected by
multiple security bypass vulnerabilities :
- sshd in OpenSSH versions before 6.6 do not properly
support wildcards on AcceptEnv lines in sshd_config,
which allow a remote attacker to bypass intended
environment restrictions by using a substring located
before a wildcard character. (CVE-2014-2532)
- The verify_host_key function in sshconnect.c in the
OpenSSH client for versions 6.6 and earlier allows
remote servers to trigger the skipping of SSHFP DNS
checking by presenting an unacceptable HostCertificate.
(CVE-2014-2653)
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top