Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenSSH sshd monitor组件输入验证错误漏洞
Vulnerability Description
OpenSSH（OpenBSD Secure Shell）on non-OpenBSD platforms是OpenBSD计划组所维护的一套运行于非OpenBSD（基于BSD的UNIX实现）平台且用于安全访问远程计算机的连接工具。 基于non-OpenBSD平台的OpenSSH 6.9及之前版本的sshd中的monitor组件中存在安全漏洞，该漏洞源于程序错误的接收MONITOR_REQ_PAM_INIT_CTX请求中的外部用户名数据。本地攻击者可通过SSH登录访问并控制sshd uid向MONITOR_
CVSS Information
N/A
Vulnerability Type
N/A