Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH 权限许可和访问控制漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 OpenSSH 6.5及之前版本的sshd服务中存在安全漏洞，该漏洞源于程序没有支持sshd_config配置文件中的AcceptEnv行的通配符。远程攻击者可通过使用位于通配符字符之前的字串利用该漏洞绕过既定的环境限制。
CVSS Information
N/A
Vulnerability Type
N/A