Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH 信息泄露漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 5.8及之前的版本中的ssh-keysign的ssh-keysign.c文件中的存在信息泄露漏洞。当使用‘ssh-rand-helper’时，本地攻击者可通过ptrace系统调用利用该漏洞获取敏感密钥信息。
CVSS Information
N/A
Vulnerability Type
N/A