OpenSSH ForceCommand Command Execution Weakness

OpenSSH ForceCommand Command Execution Weakness

Solution:
The vendor has released updates and patches. Please see the references for more information.

Ubuntu Ubuntu Linux 7.10 powerpc

Ubuntu openssh-client-udeb_4.6p1-5ubuntu0.6_powerpc.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_4.6p1-5ubuntu0.6_powerpc.udeb

Ubuntu openssh-client_4.6p1-5ubuntu0.6_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_4 .6p1-5ubuntu0.6_powerpc.deb

Ubuntu openssh-server-udeb_4.6p1-5ubuntu0.6_powerpc.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server-u deb_4.6p1-5ubuntu0.6_powerpc.udeb

Ubuntu openssh-server_4.6p1-5ubuntu0.6_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_4 .6p1-5ubuntu0.6_powerpc.deb

Ubuntu ssh-askpass-gnome_4.6p1-5ubuntu0.6_powerpc.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_4.6p1-5ubuntu0.6_powerpc.deb

Ubuntu ssh-krb5_4.6p1-5ubuntu0.6_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/ssh-krb5_4.6 p1-5ubuntu0.6_all.deb

Ubuntu ssh_4.6p1-5ubuntu0.6_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.6p1-5ubunt u0.6_all.deb

OpenBSD Portable OpenSSH 4.4p1

OpenBSD openssh-4.9p1.tar.gz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-4.9p1.tar.g z

OpenBSD Portable OpenSSH 4.7p1

OpenBSD openssh-4.9p1.tar.gz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-4.9p1.tar.g z

Ubuntu Ubuntu Linux 7.04 i386

Ubuntu openssh-client-udeb_4.3p2-8ubuntu1.5_i386.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_4.3p2-8ubuntu1.5_i386.udeb

Ubuntu openssh-client_4.3p2-8ubuntu1.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_4 .3p2-8ubuntu1.5_i386.deb

Ubuntu openssh-server-udeb_4.3p2-8ubuntu1.5_i386.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server-u deb_4.3p2-8ubuntu1.5_i386.udeb

Ubuntu openssh-server_4.3p2-8ubuntu1.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_4 .3p2-8ubuntu1.5_i386.deb

Ubuntu ssh-askpass-gnome_4.3p2-8ubuntu1.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_4.3p2-8ubuntu1.5_i386.deb

Ubuntu ssh-krb5_4.3p2-8ubuntu1.5_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/ssh-krb5_4.3 p2-8ubuntu1.5_all.deb

Ubuntu ssh_4.3p2-8ubuntu1.5_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.3p2-8ubunt u1.5_all.deb

OpenBSD Portable OpenSSH 4.0p1

OpenBSD openssh-4.9p1.tar.gz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-4.9p1.tar.g z

OpenBSD Portable OpenSSH 4.5p1

OpenBSD openssh-4.9p1.tar.gz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-4.9p1.tar.g z

Ubuntu Ubuntu Linux 7.04 amd64

Ubuntu openssh-client-udeb_4.3p2-8ubuntu1.5_amd64.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_4.3p2-8ubuntu1.5_amd64.udeb

Ubuntu openssh-client_4.3p2-8ubuntu1.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_4 .3p2-8ubuntu1.5_amd64.deb

Ubuntu openssh-server-udeb_4.3p2-8ubuntu1.5_amd64.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server-u deb_4.3p2-8ubuntu1.5_amd64.udeb

Ubuntu openssh-server_4.3p2-8ubuntu1.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_4 .3p2-8ubuntu1.5_amd64.deb

Ubuntu ssh-askpass-gnome_4.3p2-8ubuntu1.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_4.3p2-8ubuntu1.5_amd64.deb

Ubuntu ssh-krb5_4.3p2-8ubuntu1.5_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/ssh-krb5_4.3 p2-8ubuntu1.5_all.deb

Ubuntu ssh_4.3p2-8ubuntu1.5_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.3p2-8ubunt u1.5_all.deb

OpenBSD Portable OpenSSH 4.6p1

OpenBSD openssh-4.9p1.tar.gz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-4.9p1.tar.g z

Ubuntu Ubuntu Linux 6.06 LTS i386

Ubuntu openssh-client-udeb_4.2p1-7ubuntu3.5_i386.udeb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client-u deb_4.2p1-7ubuntu3.5_i386.udeb

Ubuntu openssh-client_4.2p1-7ubuntu3.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-client_4 .2p1-7ubuntu3.5_i386.deb

Ubuntu openssh-server-udeb_4.2p1-7ubuntu3.5_i386.udeb
http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/openssh-serv er-udeb_4.2p1-7ubuntu3.5_i386.udeb

Ubuntu openssh-server_4.2p1-7ubuntu3.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/openssh-server_4 .2p1-7ubuntu3.5_i386.deb

Ubuntu ssh-askpass-gnome_4.2p1-7ubuntu3.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh-askpass-gnom e_4.2p1-7ubuntu3.5_i386.deb

Ubuntu ssh_4.2p1-7ubuntu3.5_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.2p1-7ubunt u3.5_all.deb

Ubuntu Ubuntu Linux 7.10 lpia

Ubuntu openssh-client-udeb_4.6p1-5ubuntu0.6_lpia.udeb
http://ports.ubuntu.com/pool/main/o/openssh/openssh-client-udeb_4.6p1- 5ubuntu0.6_lpia.udeb

Ubuntu openssh-client_4.6p1-5ubuntu0.6_lpia.deb
http://ports.ubuntu.com/pool/main/o/openssh/openssh-client_4.6p1-5ubun tu0.6_lpia.deb

Ubuntu openssh-server-udeb_4.6p1-5ubuntu0.6_lpia.udeb
http://ports.ubuntu.com/pool/main/o/openssh/openssh-server-udeb_4.6p1- 5ubuntu0.6_lpia.udeb

Ubuntu openssh-server_4.6p1-5ubuntu0.6_lpia.deb
http://ports.ubuntu.com/pool/main/o/openssh/openssh-server_4.6p1-5ubun tu0.6_lpia.deb

Ubuntu ssh-askpass-gnome_4.6p1-5ubuntu0.6_lpia.deb
http://ports.ubuntu.com/pool/main/o/openssh/ssh-askpass-gnome_4.6p1-5u buntu0.6_lpia.deb

Ubuntu ssh-krb5_4.6p1-5ubuntu0.6_all.deb
http://security.ubuntu.com/ubuntu/pool/universe/o/openssh/ssh-krb5_4.6 p1-5ubuntu0.6_all.deb

Ubuntu ssh_4.6p1-5ubuntu0.6_all.deb
http://security.ubuntu.com/ubuntu/pool/main/o/openssh/ssh_4.6p1-5ubunt u0.6_all.deb

OpenBSD Portable OpenSSH 4.2p1

OpenBSD openssh-4.9p1.tar.gz
ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-4.9p1.tar.g z

Apple Mac OS X Server 10.4.11

Apple SecUpdSrvr2008-006PPC.dmg
http://www.apple.com/support/downloads/

Apple SecUpdSrvr2008-006Univ.dmg
http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.2

Apple MacOSXUpdCombo10.5.5.dmg
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.2

Apple MacOSXServerUpdCombo10.5.5.dmg
http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.3

Apple MacOSXUpdCombo10.5.5.dmg
http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.5.3

Apple MacOSXServerUpdCombo10.5.5.dmg
http://www.apple.com/support/downloads/

Apple Mac OS X 10.5.4

Apple MacOSXUpd10.5.5.dmg
http://www.apple.com/support/downloads/

Tevfik Karagulle cwRsync 2.0.10

Tevfik Karagulle cwRsync_2.1.2_Installer.zip
http://downloads.sourceforge.net/sereds/cwRsync_2.1.2_Installer.zip?mo dtime=1207503998&big_mirror=0

Tevfik Karagulle cwRsync 2.0.9

Tevfik Karagulle cwRsync_2.1.2_Installer.zip
http://downloads.sourceforge.net/sereds/cwRsync_2.1.2_Installer.zip?mo dtime=1207503998&big_mirror=0