Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
91
security advisorygentooprivilege escalationGentoo: GLSA-200802-06 Normal: Scponly Access Issues and Threats
Multiple vulnerabilities in scponly allow authenticated users to bypass security restrictions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200802-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: scponly: Multiple vulnerabilities Date: February 12, 2008 Bugs: #201726, #203099 ID: 200802-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities in scponly allow authenticated users to bypass security restrictions. Background ========= scponly is a shell for restricting user access to file transfer only using sftp and scp. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/scponly < 4.8 > = 4.8 Description ========== Florian Weimer from Debian discovered that scponly does not filter the - -o and -F options to the scp executable (CVE-2007-6415). Joachim Breitner reported that Subversion and rsync support invokes subcommands in an insecure manner (CVE-2007-6350). Impact ===== A local attacker could exploit these vulnerabilities to elevate privileges and execute arbitrary commands on the vulnerable host. Workaround ========= There is no known workaround at this time. Resolution ========= All scponly users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/scponly-4.8" Due to the design of scponly's Subversion support, security restrictions can still be circumvented. Please readcarefully the SECURITY file included in the package. References ========= [ 1 ] CVE-2007-6350 https://www.cve.org/CVERecord?id=CVE-2007-6350 [ 2 ] CVE-2007-6415 https://www.cve.org/CVERecord?id=CVE-2007-6415 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200802-06 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Feb 12, 2008
Gentoo
87
security advisorydebiancommand executionDebian 4.0 DSA-1473 Critical: Scponly Command Execution Risk
In addition, it was discovered that it was possible to invoke with scp with certain options that may lead to execution of arbitrary commands (CVE-2007-6415).. - ------------------------------------------------------------------------Debian Security Advisory DSA-1473
Jan 21, 2008
•Critical
Debian
87
security advisorycriticaldebianDebian: DSA 969-1 Critical: Scponly Design Flaw Enables Root Access
Updated package.. - --------------------------------------------------------------------------Debian Security Advisory DSA 969-1
Feb 13, 2006
•Critical
Debian
91
security advisoryhigh severitygentooGentoo: GLSA-200512-17 High Severity: Scponly Multiple Privilege Escalation
Local users can exploit an scponly flaw to gain root privileges, and scponly restricted users can use another vulnerability to evade shell restrictions. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200512-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: High Title: scponly: Multiple privilege escalation issues Date: December 29, 2005 Bugs: #116526 ID: 200512-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Local users can exploit an scponly flaw to gain root privileges, and scponly restricted users can use another vulnerability to evade shell restrictions. Background ========= scponly is a restricted shell, allowing only a few predefined commands. It is often used as a complement to OpenSSH to provide access to remote users without providing any remote execution privileges. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/scponly < 4.2 > = 4.2 Description ========== Max Vozeler discovered that the scponlyc command allows users to chroot into arbitrary directories. Furthermore, Pekka Pessi reported that scponly insufficiently validates command-line parameters to a scp or rsync command. Impact ===== A local attacker could gain root privileges by chrooting into arbitrary directories containing hardlinks to setuid programs. A remote scponly user could also send malicious parameters to a scp or rsync command that would allow to escape the shell restrictions and execute arbitrary programs. Workaround ========= Thereis no known workaround at this time. Resolution ========= All scponly users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =net-misc/scponly-4.2" References ========= [ 1 ] scponly release notes Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/200512-17 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to
Dec 29, 2005
Gentoo
91
security advisorygentooremote executionGentoo: GLSA-200412-01 Normal: rssh Unrestricted Command Execution
rssh and scponly do not filter command-line options that can be exploited to execute any command, thereby allowing a remote user to completely bypass the restricted shell. [More...]. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200412-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: rssh, scponly: Unrestricted command execution Date: December 03, 2004 Bugs: #72815, #72816 ID: 200412-01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= rssh and scponly do not filter command-line options that can be exploited to execute any command, thereby allowing a remote user to completely bypass the restricted shell. Background ========= rssh and scponly are two restricted shells, allowing only a few predefined commands. They are often used as a complement to OpenSSH to provide access to remote users without providing any remote execution privileges. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-misc/scponly < 4.0 > = 4.0 2 app-shells/rssh
Dec 03, 2004
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!