Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH GSSAPI 证书信息泄露漏洞
Vulnerability Description
OpenSSH 是 SSH (Secure SHell) 协议的免费开源实现。它用安全、加密的网络连接工具代替了 telnet、ftp、 rlogin、rsh 和 rcp 工具。 当启用GSSAPIDelegateCredentials时,OpenSSH before 4.2以前的版本中的sshd允许把GSSAPI证书信息授权给通过非GSSAPI方式登录的用户。这使得,GSSAPI证书信息被暴露给了不可信用户或主机。
CVSS Information
N/A
Vulnerability Type
N/A