sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated
    users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by
    the role name, to the username. (CVE-2008-3234)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated     users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by     the role name, to the username. (CVE-2008-3234)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its banner, the version of SSH installed on the remote host is older than 5.0.  Such versions may allow a local user to hijack X11 sessions because it improperly binds TCP ports on the local IPv6 interface if the corresponding ports on the IPv4 interface are in use.

ID	Name	Product	Family	Type	Severity
455139	Echo: openssh: security update to 1:9.2p1-2+deb12u6	Tenable Cloud Security	Echo Local Security Checks	Local	medium
455139	Echo: openssh: security update to 1:9.2p1-2+deb12u6	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
253812	Linux Distros Unpatched Vulnerability : CVE-2008-3234	Nessus	Misc.	Local	medium
31737	OpenSSH X11 Forwarding Session Hijacking	Nessus	Misc.	Remote	medium

Detections

Analytics

CVE-2008-3234

medium

Tenable Plugins

medium

medium

medium

medium