Description
SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.kb.cert.org/vuls/id/341187 ↗
- http://archives.neohapsis.com/archives/bugtraq/2002-05/0204.html ↗
- http://www.ssh.com/company/newsroom/article/201/ ↗
- http://www.securityfocus.com/bid/4810 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9163 ↗
- http://www.ciac.org/ciac/bulletins/m-081.shtml ↗
- http://www.ssh.com/products/ssh/advisories/authentication.cfm ↗