• info
• discussion
• exploit
• solution
• references

OpenSSH Kerberos Arbitrary Privilege Elevation Vulnerability

Solution:
The vendor has made upgrades available.

OpenSSH packages for Trustix Secure Linux do not have Kerberos support enabled. However, fixes have been provided for those users who wish to enable Kerberos support.


OpenBSD OpenSSH 3.0

• OpenBSD OpenSSH 3.0.1
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/openssh-3.0.1.tgz


• Trustix openssh-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/openssh-3.1.0p1-3tr .i586.rpm


• Trustix openssh-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/openssh-3.1.0p1-3tr .i586.rpm


• Trustix openssh-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-3.1.0p1-3tr .i586.rpm


• Trustix openssh-3.1.0p1-3tr.src.rpm
  Source RPM.
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/SRPMS/openssh-3.1.0p1-3t r.src.rpm


• Trustix openssh-3.1.0p1-3tr.src.rpm
  Source RPM.
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/SRPMS/openssh-3.1.0p1-3t r.src.rpm


• Trustix openssh-3.1.0p1-3tr.src.rpm
  Source RPM.
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/openssh-3.1.0p1-3t r.src.rpm


• Trustix openssh-clients-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/openssh-clients-3.1 .0p1-3tr.i586.rpm


• Trustix openssh-clients-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/openssh-clients-3.1 .0p1-3tr.i586.rpm


• Trustix openssh-clients-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-clients-3.1 .0p1-3tr.i586.rpm


• Trustix openssh-server-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/openssh-server-3.1. 0p1-3tr.i586.rpm


• Trustix openssh-server-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/openssh-server-3.1. 0p1-3tr.i586.rpm


• Trustix openssh-server-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-server-3.1. 0p1-3tr.i586.rpm

OpenBSD OpenSSH 3.0 p1

• OpenBSD OpenSSH 3.0.1p1
  ftp://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-3.0.1p1.tar .gz


• Trustix openssh-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/openssh-3.1.0p1-3tr .i586.rpm


• Trustix openssh-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/openssh-3.1.0p1-3tr .i586.rpm


• Trustix openssh-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-3.1.0p1-3tr .i586.rpm


• Trustix openssh-3.1.0p1-3tr.src.rpm
  Source RPM.
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/SRPMS/openssh-3.1.0p1-3t r.src.rpm


• Trustix openssh-3.1.0p1-3tr.src.rpm
  Source RPM.
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/SRPMS/openssh-3.1.0p1-3t r.src.rpm


• Trustix openssh-3.1.0p1-3tr.src.rpm
  Source RPM.
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/SRPMS/openssh-3.1.0p1-3t r.src.rpm


• Trustix openssh-clients-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/openssh-clients-3.1 .0p1-3tr.i586.rpm


• Trustix openssh-clients-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/openssh-clients-3.1 .0p1-3tr.i586.rpm


• Trustix openssh-clients-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-clients-3.1 .0p1-3tr.i586.rpm


• Trustix openssh-server-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/openssh-server-3.1. 0p1-3tr.i586.rpm


• Trustix openssh-server-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/openssh-server-3.1. 0p1-3tr.i586.rpm


• Trustix openssh-server-3.1.0p1-3tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/openssh-server-3.1. 0p1-3tr.i586.rpm