CVE-2015-6563 in Apple Mac OS X

요약 (영어)

The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

예약하다

2015. 08. 21.

공개

2015. 08. 23.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
78828	Apple Mac OS X OpenSSH 권한 상승	20	정의되지 않음	공식 수정	CVE-2015-6563
77396	OpenSSH sshd monitor.c 권한 상승	20	입증되지 않음	공식 수정	CVE-2015-6563