CVE-2008-1657

OpenSSH 4.4-4.8 - Authenticated ForceCommand Bypass via .ssh/rc Session File

Title source: llm
STIX 2.1

Description

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

References (32)

Core 32
Core References
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28531
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/usn-649-1
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-2419
Patch vendor-advisory x_refsource_openbsd
http://www.openbsd.org/errata43.html#001_openssh
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA08-260A.html
Vendor Advisory x_refsource_confirm
http://www.openssh.com/txt/release-4.9
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1624/references
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2584
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2396
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1035/references
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41549
Various Sources x_refsource_confirm
http://support.attachmate.com/techdocs/2374.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32110
Mailing List vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29609
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31531
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019733
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29735
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29683
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30361
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31882
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32080
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29939
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29602
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/490488/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_netbsd
ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-005.txt.asc
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0139
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29693
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:098
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200804-03.xml

Scores

EPSS 0.0046
EPSS Percentile 64.2%

Details

CWE
CWE-264
Status published
Products (6)
openbsd/openssh 4.4
openbsd/openssh 4.4p1
openbsd/openssh 4.5
openbsd/openssh 4.6
openbsd/openssh 4.7
openbsd/openssh 4.8
Published Apr 02, 2008
Tracked Since Feb 18, 2026