Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH server 安全漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）是OpenBSD计划组所维护的一套用于安全访问远程计算机的连接工具。该工具是SSH协议的开源实现，支持对所有的传输进行加密，可有效阻止窃听、连接劫持以及其他网络级的攻击。 Fedora和Red Hat Enterprise Linux 7中使用的OpenSSH服务器中存在安全漏洞。当程序在Kerberos环境中运行时，远程攻击者可利用该漏洞通过‘.k5users’文件中列出的用户登录，绕过身份验证要求。
CVSS Information
N/A
Vulnerability Type
N/A