sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

The remote NewStart CGSL host, running version MAIN 4.05, has openssh-latest packages installed that are affected by multiple vulnerabilities:

  - scp in OpenSSH 4.2p1 allows attackers to execute     arbitrary commands via filenames that contain shell     metacharacters or spaces, which are expanded twice.
    (CVE-2006-0225)

  - sshd in OpenSSH before 4.4, when using the version 1 SSH     protocol, allows remote attackers to cause a denial of     service (CPU consumption) via an SSH packet that     contains duplicate blocks, which is not properly handled     by the CRC compensation attack detector. (CVE-2006-4924)

  - Signal handler race condition in OpenSSH before 4.4     allows remote attackers to cause a denial of service     (crash), and possibly execute arbitrary code if GSSAPI     authentication is enabled, via unspecified vectors that     lead to a double-free. (CVE-2006-5051)

  - Unspecified vulnerability in the sshd Privilege     Separation Monitor in OpenSSH before 4.5 causes weaker     verification that authentication has been successful,     which might allow attackers to bypass authentication.
    NOTE: as of 20061108, it is believed that this issue is     only exploitable by leveraging vulnerabilities in the     unprivileged process, which are not known to exist.
    (CVE-2006-5794)

  - Unspecified vulnerability in the     linux_audit_record_event function in OpenSSH 4.3p2, as     used on Fedora Core 6 and possibly other systems, allows     remote attackers to write arbitrary characters to an     audit log via a crafted username. NOTE: some of these     details are obtained from third party information.
    (CVE-2007-3102)

  - The (1) remote_glob function in sftp-glob.c and the (2)     process_put function in sftp.c in OpenSSH 5.8 and     earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2,     OpenBSD 4.7, and other products, allow remote     authenticated users to cause a denial of service (CPU     and memory consumption) via crafted glob expressions     that do not match any pathnames, as demonstrated by glob     expressions in SSH_FXP_STAT requests to an sftp daemon,     a different vulnerability than CVE-2010-2632.
    (CVE-2010-4755)

  - The default configuration of OpenSSH through 6.1     enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier     for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many     new TCP connections. (CVE-2010-5107)

  - It was found that OpenSSH did not properly handle     certain AcceptEnv parameter values with wildcard     characters. A remote attacker could use this flaw to     bypass intended environment variable restrictions.
    (CVE-2014-2532)

  - It was discovered that OpenSSH clients did not correctly     verify DNS SSHFP records. A malicious server could use     this flaw to force a connecting client to skip the DNS     SSHFP record check and require the user to perform     manual host verification of the DNS SSHFP record.
    (CVE-2014-2653)

  - It was found that when OpenSSH was used in a Kerberos     environment, remote authenticated users were allowed to     log in as a different user if they were listed in the     ~/.k5users file of that user, potentially bypassing     intended authentication restrictions. (CVE-2014-9278)

  - It was discovered that the OpenSSH sshd daemon did not     check the list of keyboard-interactive authentication     methods for duplicates. A remote attacker could use this     flaw to bypass the MaxAuthTries limit, making it easier     to perform password guessing attacks. (CVE-2015-5600)

  - It was discovered that the OpenSSH sshd daemon fetched     PAM environment settings before running the login     program. In configurations with UseLogin=yes and the     pam_env PAM module configured to read user environment     settings, a local user could use this flaw to execute     arbitrary code as root. (CVE-2015-8325)

  - An information leak flaw was found in the way the     OpenSSH client roaming feature was implemented. A     malicious server could potentially use this flaw to leak     portions of memory (possibly including private SSH keys)     of a successfully authenticated OpenSSH client.
    (CVE-2016-0777)

  - An access flaw was discovered in OpenSSH; the OpenSSH     client did not correctly handle failures to generate     authentication cookies for untrusted X11 forwarding. A     malicious or compromised remote X application could     possibly use this flaw to establish a trusted connection     to the local X server, even if only untrusted X11     forwarding was requested. (CVE-2016-1908)

  - A covert timing channel flaw was found in the way     OpenSSH handled authentication of non-existent users. A     remote unauthenticated attacker could possibly use this     flaw to determine valid user names by measuring the     timing of server responses. (CVE-2016-6210)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssh packages installed that are affected by multiple vulnerabilities:

  - scp in OpenSSH 4.2p1 allows attackers to execute     arbitrary commands via filenames that contain shell     metacharacters or spaces, which are expanded twice.
    (CVE-2006-0225)

  - sshd in OpenSSH before 4.4, when using the version 1 SSH     protocol, allows remote attackers to cause a denial of     service (CPU consumption) via an SSH packet that     contains duplicate blocks, which is not properly handled     by the CRC compensation attack detector. (CVE-2006-4924)

  - Signal handler race condition in OpenSSH before 4.4     allows remote attackers to cause a denial of service     (crash), and possibly execute arbitrary code if GSSAPI     authentication is enabled, via unspecified vectors that     lead to a double-free. (CVE-2006-5051)

  - Unspecified vulnerability in the sshd Privilege     Separation Monitor in OpenSSH before 4.5 causes weaker     verification that authentication has been successful,     which might allow attackers to bypass authentication.
    NOTE: as of 20061108, it is believed that this issue is     only exploitable by leveraging vulnerabilities in the     unprivileged process, which are not known to exist.
    (CVE-2006-5794)

  - Unspecified vulnerability in the     linux_audit_record_event function in OpenSSH 4.3p2, as     used on Fedora Core 6 and possibly other systems, allows     remote attackers to write arbitrary characters to an     audit log via a crafted username. NOTE: some of these     details are obtained from third party information.
    (CVE-2007-3102)

  - The (1) remote_glob function in sftp-glob.c and the (2)     process_put function in sftp.c in OpenSSH 5.8 and     earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2,     OpenBSD 4.7, and other products, allow remote     authenticated users to cause a denial of service (CPU     and memory consumption) via crafted glob expressions     that do not match any pathnames, as demonstrated by glob     expressions in SSH_FXP_STAT requests to an sftp daemon,     a different vulnerability than CVE-2010-2632.
    (CVE-2010-4755)

  - The default configuration of OpenSSH through 6.1     enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier     for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many     new TCP connections. (CVE-2010-5107)

  - It was found that OpenSSH did not properly handle     certain AcceptEnv parameter values with wildcard     characters. A remote attacker could use this flaw to     bypass intended environment variable restrictions.
    (CVE-2014-2532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2014-2653 The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

CVE-2014-2532 sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - CVE-2015-5600: MaxAuthTries limit bypass via duplicates     in KbdInteractiveDevices (#1245969)

  - CVE-2016-3115: missing sanitisation of input for X11     forwarding (#1317816)

  - SSH2_MSG_DISCONNECT for user initiated disconnect follow     RFC 4253 (#1222500)

  - Add missing dot in ssh manual page (#1197763)

  - Fix minor problems found by covscan/gcc (#1196063)

  - Add missing options in man ssh (#1197763)

  - Add KbdInteractiveAuthentication documentation to man     sshd_config (#1109251)

  - Correct freeing newkeys structure when privileged     monitor exits (#1208584)

  - Fix problems with failing persistent connections     (#1131585)

  - Fix memory leaks in auditing patch (#1208584)

  - Better approach to logging sftp commands in chroot

  - Make sshd -T write all config options and add missing     Cipher, MAC to man (#1109251)

  - Add missing ControlPersist option to man ssh (#1197763)

  - Add sftp option to force mode of created files     (#1191055)

  - Do not load RSA1 keys in FIPS mode (#1197072)

  - Add missing support for ECDSA in ssh-keyscan (#1196331)

  - Fix coverity/gcc issues (#1196063)

  - Backport wildcard functionality for PermitOpen in     sshd_config file (#1159055)

  - Ability to specify an arbitrary LDAP filter in ldap.conf     (#1119506)

  - Fix ControlPersist option with ProxyCommand (#1160487)

  - Backport fix of ssh-keygen with error : gethostname:
    File name too long (#1161454)

  - Backport show remote address instead of UNKNOWN after     timeout at password prompt (#1161449)

  - Fix printing of extensions in v01 certificates     (#1093869)

  - Fix confusing audit trail for unsuccessful logins     (#1127312)

  - Don't close fds for internal sftp sessions (#1085710)

  - Fix config parsing quotes (backport) (#1134938)

  - Enable logging in chroot into separate file (#1172224)

  - Fix auditing when using combination of ForcedCommand and     PTY (#1131585)

  - Fix ssh-copy-id on non-sh remote shells (#1135521)

  - ignore SIGXFSZ in postauth monitor child (#1133906)

  - don't try to generate DSA keys in the init script in     FIPS mode (#1118735)

  - ignore SIGPIPE in ssh-keyscan (#1108836)

  - ssh-add: fix fatal exit when removing card (#1042519)

  - fix race in backported ControlPersist patch (#953088)

  - skip requesting smartcard PIN when removing keys from     agent (#1042519)

  - add possibility to autocreate only RSA key into     initscript (#1111568)

  - fix several issues reported by coverity

  - x11 forwarding - be less restrictive when can't bind to     one of available addresses (#1027197)

  - better fork error detection in audit patch (#1028643)

  - fix openssh-5.3p1-x11.patch for non-linux platforms     (#1100913)

  - prevent a server from skipping SSHFP lookup (#1081338)     (CVE-2014-2653)

  - ignore environment variables with embedded '=' or '\0'     characters (CVE-2014-2532)

  - backport ControlPersist option (#953088)

  - log when a client requests an interactive session and     only sftp is allowed (#997377)

  - don't try to load RSA1 host key in FIPS mode (#1009959)

  - restore Linux oom_adj setting when handling SIGHUP to     maintain behaviour over restart (#1010429)

  - ssh-keygen -V - relative-specified certificate expiry     time should be relative to current time (#1022459)

  - adjust the key echange DH groups and ssh-keygen     according to SP800-131A (#993580)

  - log failed integrity test if /etc/system-fips exists     (#1020803)

  - backport ECDSA and ECDH support (#1028335)

  - use dracut-fips package to determine if a FIPS module is     installed (#1001565)

  - use dist tag in suffixes for hmac checksum files     (#1001565)

  - use hmac_suffix for ssh[,d] hmac checksums (#1001565)

  - fix NSS keys support (#1004763)

  - change default value of MaxStartups - CVE-2010-5107 -     #908707

  - add -fips subpackages that contains the FIPS module     files (#1001565)

  - don't use SSH_FP_MD5 for fingerprints in FIPS mode     (#998835)

  - do ssh_gssapi_krb5_storecreds twice - before and after     pam sesssion (#974096)

  - bump the minimum value of SSH_USE_STRONG_RNG to 14     according to SP800-131A (#993577)

  - fixed an issue with broken 'ssh -I pkcs11' (#908038)

  - abort non-subsystem sessions to forced internal     sftp-server (#993509)

  - reverted 'store krb5 credentials after a pam session is     created (#974096)'

  - Add support for certificate key types for users and     hosts (#906872)

  - Apply RFC3454 stringprep to banners when possible     (#955792)

  - fix chroot logging issue (#872169)

  - change the bad key permissions error message (#880575)

  - fix a race condition in ssh-agent (#896561)

  - backport support for PKCS11 from openssh-5.4p1 (#908038)

  - add a KexAlgorithms knob to the client and server     configuration (#951704)

  - fix parsing logic of ldap.conf file (#954094)

  - Add HMAC-SHA2 algorithm support (#969565)

  - store krb5 credentials after a pam session is created     (#974096)

The remote host is running a version of Mac OS X that is 10.6.8 or later but prior to 10.11 and is affected by multiple vulnerabilities in the following components : 

 - Address Book 
 - AirScan 
 - apache_mod_php 
 - Apple Online Store Kit 
 - AppleEvents 
 - Audio 
 - bash 
 - Certificate Trust Policy 
 - CFNetwork Cookies - CFNetwork FTPProtocol 
 - CFNetwork HTTPProtocol 
 - CFNetwork Proxies 
 - CFNetwork SSL 
 - CoreCrypto 
 - CoreText 
 - Dev Tools 
 - Disk Images 
 - dyld 
 - EFI 
 - Finder 
 - Game Center 
 - Heimdal 
 - ICU 
 - Install Framework Legacy 
 - Intel Graphics Driver 
 - IOAudioFamily 
 - IOGraphics 
 - IOHIDFamily 
 - IOStorageFamily 
 - Kernel 
 - libc 
 - libpthread 
 - libxpc 
 - Login Window 
 - lukemftpd 
 - Mail 
 - Multipeer Connectivity 
 - NetworkExtension 
 - Notes 
 - OpenSSH 
 - OpenSSL 
 - procmail 
 - remote_cmds 
 - removefile 
 - Ruby 
 - Safari 
 - Safari Downloads 
 - Safari Extensions 
 - Safari Safe Browsing 
 - Security 
 - SMB 
 - SQLite 
 - Telephony 
 - Terminal 
 - tidy 
 - Time Machine 
 - WebKit 
 - WebKit CSS 
 - WebKit JavaScript Bindings 
 - WebKit Page Loading 
 - WebKit Plug-ins

The remote host is running a version of Mac OS X that is 10.6.8 or later but prior to 10.11. It is, therefore, affected by multiple vulnerabilities in the following components :

  - Address Book
  - AirScan
  - apache_mod_php
  - Apple Online Store Kit
  - AppleEvents
  - Audio
  - bash
  - Certificate Trust Policy
  - CFNetwork Cookies
  - CFNetwork FTPProtocol
  - CFNetwork HTTPProtocol
  - CFNetwork Proxies
  - CFNetwork SSL
  - CoreCrypto
  - CoreText
  - Dev Tools
  - Disk Images
  - dyld
  - EFI
  - Finder
  - Game Center
  - Heimdal
  - ICU
  - Install Framework Legacy
  - Intel Graphics Driver
  - IOAudioFamily
  - IOGraphics
  - IOHIDFamily
  - IOStorageFamily
  - Kernel
  - libc
  - libpthread
  - libxpc
  - Login Window
  - lukemftpd
  - Mail
  - Multipeer Connectivity
  - NetworkExtension
  - Notes
  - OpenSSH
  - OpenSSL
  - procmail
  - remote_cmds
  - removefile
  - Ruby
  - Safari
  - Safari Downloads
  - Safari Extensions
  - Safari Safe Browsing
  - Security
  - SMB
  - SQLite
  - Telephony
  - Terminal
  - tidy
  - Time Machine
  - WebKit
  - WebKit CSS
  - WebKit JavaScript Bindings
  - WebKit Page Loading
  - WebKit Plug-ins

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

Updated openssh packages fix security vulnerabilities :

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character (CVE-2014-2532).

Matthew Vernon reported that if a SSH server offers a HostCertificate that the ssh client doesn't accept, then the client doesn't check the DNS for SSHFP records. As a consequence a malicious server can disable SSHFP-checking by presenting a certificate (CVE-2014-2653).

Updated openssh packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

OpenSSH is OpenBSD's SSH (Secure Shell) protocol implementation. These packages include the core files necessary for both the OpenSSH client and server.

It was discovered that OpenSSH clients did not correctly verify DNS SSHFP records. A malicious server could use this flaw to force a connecting client to skip the DNS SSHFP record check and require the user to perform manual host verification of the DNS SSHFP record.
(CVE-2014-2653)

It was found that OpenSSH did not properly handle certain AcceptEnv parameter values with wildcard characters. A remote attacker could use this flaw to bypass intended environment variable restrictions.
(CVE-2014-2532)

This update also fixes the following bugs :

* Based on the SP800-131A information security standard, the generation of a digital signature using the Digital Signature Algorithm (DSA) with the key size of 1024 bits and RSA with the key size of less than 2048 bits is disallowed after the year 2013. After this update, ssh-keygen no longer generates keys with less than 2048 bits in FIPS mode. However, the sshd service accepts keys of size 1024 bits as well as larger keys for compatibility reasons. (BZ#993580)

* Previously, the openssh utility incorrectly set the oom_adj value to
-17 for all of its children processes. This behavior was incorrect because the children processes were supposed to have this value set to 0. This update applies a patch to fix this bug and oom_adj is now properly set to 0 for all children processes as expected. (BZ#1010429)

* Previously, if the sshd service failed to verify the checksum of an installed FIPS module using the fipscheck library, the information about this failure was only provided at the standard error output of sshd. As a consequence, the user could not notice this message and be uninformed when a system had not been properly configured for FIPS mode. To fix this bug, this behavior has been changed and sshd now sends such messages via the syslog service. (BZ#1020803)

* When keys provided by the pkcs11 library were removed from the ssh agent using the 'ssh-add -e' command, the user was prompted to enter a PIN. With this update, a patch has been applied to allow the user to remove the keys provided by pkcs11 without the PIN. (BZ#1042519)

In addition, this update adds the following enhancements :

* With this update, ControlPersist has been added to OpenSSH. The option in conjunction with the ControlMaster configuration directive specifies that the master connection remains open in the background after the initial client connection has been closed. (BZ#953088)

* When the sshd daemon is configured to force the internal SFTP session, and the user attempts to use a connection other than SFTP, the appropriate message is logged to the /var/log/secure file.
(BZ#997377)

* Support for Elliptic Curve Cryptography modes for key exchange (ECDH) and host user keys (ECDSA) as specified by RFC5656 has been added to the openssh packages. However, they are not enabled by default and the user has to enable them manually. For more information on how to configure ECDSA and ECDH with OpenSSH, see:
https://access.redhat.com/solutions/711953 (BZ#1028335)

All openssh users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

It was discovered that OpenSSH clients did not correctly verify DNS SSHFP records. A malicious server could use this flaw to force a connecting client to skip the DNS SSHFP record check and require the user to perform manual host verification of the DNS SSHFP record.
(CVE-2014-2653)

It was found that OpenSSH did not properly handle certain AcceptEnv parameter values with wildcard characters. A remote attacker could use this flaw to bypass intended environment variable restrictions.
(CVE-2014-2532)

This update also fixes the following bugs :

  - Based on the SP800-131A information security standard,     the generation of a digital signature using the Digital     Signature Algorithm (DSA) with the key size of 1024 bits     and RSA with the key size of less than 2048 bits is     disallowed after the year 2013. After this update,     ssh-keygen no longer generates keys with less than 2048     bits in FIPS mode. However, the sshd service accepts     keys of size 1024 bits as well as larger keys for     compatibility reasons.

  - Previously, the openssh utility incorrectly set the     oom_adj value to -17 for all of its children processes.
    This behavior was incorrect because the children     processes were supposed to have this value set to 0.
    This update applies a patch to fix this bug and oom_adj     is now properly set to 0 for all children processes as     expected.

  - Previously, if the sshd service failed to verify the     checksum of an installed FIPS module using the fipscheck     library, the information about this failure was only     provided at the standard error output of sshd. As a     consequence, the user could not notice this message and     be uninformed when a system had not been properly     configured for FIPS mode. To fix this bug, this behavior     has been changed and sshd now sends such messages via     the syslog service.

  - When keys provided by the pkcs11 library were removed     from the ssh agent using the 'ssh-add -e' command, the     user was prompted to enter a PIN. With this update, a     patch has been applied to allow the user to remove the     keys provided by pkcs11 without the PIN.

In addition, this update adds the following enhancements :

  - With this update, ControlPersist has been added to     OpenSSH. The option in conjunction with the     ControlMaster configuration directive specifies that the     master connection remains open in the background after     the initial client connection has been closed.

  - When the sshd daemon is configured to force the internal     SFTP session, and the user attempts to use a connection     other than SFTP, the appropriate message is logged to     the /var/log/secure file.

  - Support for Elliptic Curve Cryptography modes for key     exchange (ECDH) and host user keys (ECDSA) as specified     by RFC5656 has been added to the openssh packages.
    However, they are not enabled by default and the user     has to enable them manually.

From Red Hat Security Advisory 2014:1552 :

Updated openssh packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

OpenSSH is OpenBSD's SSH (Secure Shell) protocol implementation. These packages include the core files necessary for both the OpenSSH client and server.

It was discovered that OpenSSH clients did not correctly verify DNS SSHFP records. A malicious server could use this flaw to force a connecting client to skip the DNS SSHFP record check and require the user to perform manual host verification of the DNS SSHFP record.
(CVE-2014-2653)

It was found that OpenSSH did not properly handle certain AcceptEnv parameter values with wildcard characters. A remote attacker could use this flaw to bypass intended environment variable restrictions.
(CVE-2014-2532)

This update also fixes the following bugs :

* Based on the SP800-131A information security standard, the generation of a digital signature using the Digital Signature Algorithm (DSA) with the key size of 1024 bits and RSA with the key size of less than 2048 bits is disallowed after the year 2013. After this update, ssh-keygen no longer generates keys with less than 2048 bits in FIPS mode. However, the sshd service accepts keys of size 1024 bits as well as larger keys for compatibility reasons. (BZ#993580)

* Previously, the openssh utility incorrectly set the oom_adj value to
-17 for all of its children processes. This behavior was incorrect because the children processes were supposed to have this value set to 0. This update applies a patch to fix this bug and oom_adj is now properly set to 0 for all children processes as expected. (BZ#1010429)

* Previously, if the sshd service failed to verify the checksum of an installed FIPS module using the fipscheck library, the information about this failure was only provided at the standard error output of sshd. As a consequence, the user could not notice this message and be uninformed when a system had not been properly configured for FIPS mode. To fix this bug, this behavior has been changed and sshd now sends such messages via the syslog service. (BZ#1020803)

* When keys provided by the pkcs11 library were removed from the ssh agent using the 'ssh-add -e' command, the user was prompted to enter a PIN. With this update, a patch has been applied to allow the user to remove the keys provided by pkcs11 without the PIN. (BZ#1042519)

In addition, this update adds the following enhancements :

* With this update, ControlPersist has been added to OpenSSH. The option in conjunction with the ControlMaster configuration directive specifies that the master connection remains open in the background after the initial client connection has been closed. (BZ#953088)

* When the sshd daemon is configured to force the internal SFTP session, and the user attempts to use a connection other than SFTP, the appropriate message is logged to the /var/log/secure file.
(BZ#997377)

* Support for Elliptic Curve Cryptography modes for key exchange (ECDH) and host user keys (ECDSA) as specified by RFC5656 has been added to the openssh packages. However, they are not enabled by default and the user has to enable them manually. For more information on how to configure ECDSA and ECDH with OpenSSH, see:
https://access.redhat.com/solutions/711953 (BZ#1028335)

All openssh users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

The version of OpenSSH running on the remote host is affected by multiple security bypass vulnerabilities :

  - sshd in OpenSSH versions before 6.6 do not properly     support wildcards on AcceptEnv lines in sshd_config,     which allow a remote attacker to bypass intended     environment restrictions by using a substring located     before a wildcard character. (CVE-2014-2532)

  - The verify_host_key function in sshconnect.c in the     OpenSSH client for versions 6.6 and earlier allows     remote servers to trigger the skipping of SSHFP DNS     checking by presenting an unacceptable HostCertificate.
    (CVE-2014-2653)

This update for OpenSSH fixes the following issues :

  - Exit sshd normally when port is already in use.
    (bnc#832628)

  - Use hardware crypto engines where available.
    (bnc#826427)

  - Use correct options for login when it is used.
    (bnc#833605)

  - Move FIPS messages to higher debug level. (bnc#862875)

  - Fix forwarding with IPv6 addresses in DISPLAY.
    (bnc#847710)

  - Do not link OpenSSH binaries with LDAP libraries.
    (bnc#826906)

  - Parse AcceptEnv properly. (bnc#869101, CVE-2014-2532)

  - Check SSHFP DNS records even for server certificates.
    (bnc#870532, CVE-2014-2653)

- environment variables with embedded '=' or '0'     characters are now ignored

    - prevents a server from skipping SSHFP lookup and       forcing a new-hostkey dialog by offering only       certificate keys

    - /etc/ssh/moduli is readable by all now

    - ssh-copy-id is run in so called legacy mode when       SSH_COPY_ID_LEGACY variable is set

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- environment variables with embedded '=' or '\0'     characters are now ignored

    - prevents a server from skipping SSHFP lookup and       forcing a new-hostkey dialog by offering only       certificate keys

    - ssh-agent is now suspend-aware as it gets also       CLOCK_BOOTTIME time

    - /etc/ssh/moduli is readable by all now

    - sshd-keygen.service depends on existence of       /etc/ssh/ssh_host_ecdsa_key instead of       /etc/ssh/ssh_host_dsa_key by default

    - ssh-copy-id is run in so called legacy mode when       SSH_COPY_ID_LEGACY variable is set

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201405-06 (OpenSSH: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenSSH. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could execute arbitrary code, cause a Denial of       Service condition, obtain sensitive information, or bypass environment       restrictions.
  Workaround :

    There is no known workaround at this time.

Updated openssh packages fixes security vulnerabilities :

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character (CVE-2014-2532).

Matthew Vernon reported that if a SSH server offers a HostCertificate that the ssh client doesn't accept, then the client doesn't check the DNS for SSHFP records. As a consequence a malicious server can disable SSHFP-checking by presenting a certificate (CVE-2014-2653).

Two vulnerabilities were discovered in OpenSSH, an implementation of the SSH protocol suite. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2014-2532     Jann Horn discovered that OpenSSH incorrectly handled     wildcards in AcceptEnv lines. A remote attacker could     use this issue to trick OpenSSH into accepting any     environment variable that contains the characters before     the wildcard character.

  - CVE-2014-2653     Matthew Vernon reported that if a SSH server offers a     HostCertificate that the ssh client doesn't accept, then     the client doesn't check the DNS for SSHFP records. As a     consequence a malicious server can disable     SSHFP-checking by presenting a certificate.

  Note that a host verification prompt is still displayed before   connecting.

New openssh packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue.

Jann Horn discovered that OpenSSH incorrectly handled wildcards in AcceptEnv lines. A remote attacker could use this issue to possibly bypass certain intended environment variable restrictions.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of OpenSSH server before 6.6 are unpatched for multiple restriction bypass vulnerabilities:

 -  A vulnerability exists related to wildcard usage in the 'AcceptEnv' configuration setting within sshd_config. This could be leveraged by an attacker to bypass environment restrictions via a specially crafted request.

Note: NNM has solely relied on the banner of the SSH client to perform this check. Any backported patches or workarounds such as recompiling or edited configurations are not observable through the banner. (CVE-2014-2532)
 - 	The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition. (CVE-2014-1692)

According to its banner, the version of OpenSSH running on the remote host is prior to 6.6. It is, therefore, affected by the following vulnerabilities :

  - A flaw exists due to a failure to initialize certain     data structures when makefile.inc is modified to enable     the J-PAKE protocol. An unauthenticated, remote attacker     can exploit this to corrupt memory, resulting in a     denial of service condition and potentially the     execution of arbitrary code. (CVE-2014-1692)

  - An error exists related to the 'AcceptEnv' configuration     setting in sshd_config due to improper processing of     wildcard characters. An unauthenticated, remote attacker     can exploit this, via a specially crafted request, to     bypass intended environment restrictions.
    (CVE-2014-2532)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
127415	NewStart CGSL MAIN 4.05 : openssh-latest Multiple Vulnerabilities (NS-SA-2019-0146)	Nessus	NewStart CGSL Local Security Checks	critical
127206	NewStart CGSL CORE 5.04 / MAIN 5.04 : openssh Multiple Vulnerabilities (NS-SA-2019-0036)	Nessus	NewStart CGSL Local Security Checks	medium
91617	F5 Networks BIG-IP : OpenSSH vulnerabilities (K15780)	Nessus	F5 Networks Local Security Checks	medium
90076	OracleVM 3.3 / 3.4 : openssh (OVMSA-2016-0038)	Nessus	OracleVM Local Security Checks	medium
8982	Mac OS X < 10.11 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	critical
86270	Mac OS X < 10.11 Multiple Vulnerabilities (GHOST)	Nessus	MacOS X Local Security Checks	critical
82348	Mandriva Linux Security Advisory : openssh (MDVSA-2015:095)	Nessus	Mandriva Local Security Checks	medium
79184	CentOS 6 : openssh (CESA-2014:1552)	Nessus	CentOS Local Security Checks	medium
78641	Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20141014)	Nessus	Scientific Linux Local Security Checks	medium
78526	Oracle Linux 6 : openssh (ELSA-2014-1552)	Nessus	Oracle Linux Local Security Checks	medium
78413	RHEL 6 : openssh (RHSA-2014:1552)	Nessus	Red Hat Local Security Checks	medium
78312	Amazon Linux AMI : openssh (ALAS-2014-369)	Nessus	Amazon Linux Local Security Checks	medium
76168	AIX OpenSSH Vulnerability : openssh_advisory4.asc	Nessus	AIX Local Security Checks	medium
76141	SuSE 11.3 Security Update : openssh (SAT Patch Number 9357)	Nessus	SuSE Local Security Checks	medium
76140	SuSE 11.3 Security Update : openssh (SAT Patch Number 9357)	Nessus	SuSE Local Security Checks	medium
74384	Fedora 19 : openssh-6.2p2-8.fc19 (2014-6569)	Nessus	Fedora Local Security Checks	medium
74133	Fedora 20 : openssh-6.4p1-4.fc20 (2014-6380)	Nessus	Fedora Local Security Checks	medium
73958	GLSA-201405-06 : OpenSSH: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
73444	Mandriva Linux Security Advisory : openssh (MDVSA-2014:068)	Nessus	Mandriva Local Security Checks	medium
73350	Debian DSA-2894-1 : openssh - security update	Nessus	Debian Local Security Checks	medium
73252	Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : openssh (SSA:2014-086-06)	Nessus	Slackware Local Security Checks	medium
73202	Ubuntu 10.04 LTS / 12.04 LTS / 12.10 / 13.10 : openssh vulnerability (USN-2155-1)	Nessus	Ubuntu Local Security Checks	medium
8169	OpenSSH < 6.6 Multiple Remote Restriction Bypass Vulnerability	Nessus Network Monitor	SSH	high
73079	OpenSSH < 6.6 Multiple Vulnerabilities	Nessus	Misc.	high

Detections

Analytics

CVE-2014-2532

medium

Tenable Plugins

critical

medium

medium

medium

critical

critical

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

high

high