CVE-2011-5000

Severity

35%

Complexity

68%

Confidentiality

48%

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

CVSS 2.0 Base Score 3.5. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:S/C:N/I:N/A:P).

Overview

Type

OpenBSD

First reported 13 years ago

2012-04-05 14:55:00

Last updated 12 years ago

2012-07-22 03:33:00

Affected Software

OpenBSD OpenSSH 1.2

1.2

OpenBSD OpenSSH 1.2.1

1.2.1

OpenBSD OpenSSH 1.2.2

1.2.2

OpenBSD OpenSSH 1.2.3

1.2.3

OpenBSD OpenSSH 1.2.27

1.2.27

OpenBSD OpenSSH 1.3

1.3

OpenBSD OpenSSH 1.5

1.5

OpenBSD OpenSSH 1.5.7

1.5.7

OpenBSD OpenSSH 1.5.8

1.5.8

OpenBSD OpenSSH 3.0

3.0

OpenBSD OpenSSH 3.0.1

3.0.1

OpenBSD OpenSSH 3.0.1 p1

3.0.1p1

OpenBSD OpenSSH 3.0.2

3.0.2

OpenBSD OpenSSH 3.0.2p1

3.0.2p1

OpenBSD OpenSSH 3.0 p1

3.0p1

OpenBSD OpenSSH 3.1

3.1

OpenBSD OpenSSH 3.1 p1

3.1p1

OpenBSD OpenSSH 3.2

3.2

OpenBSD OpenSSH 3.2.2

3.2.2

OpenBSD OpenSSH 3.2.2 p1

3.2.2p1

OpenBSD OpenSSH 3.2.3 p1

3.2.3p1

OpenBSD OpenSSH 3.3

3.3

OpenBSD OpenSSH 3.3 p1

3.3p1

OpenBSD OpenSSH 3.4

3.4

OpenBSD OpenSSH 3.4 p1

3.4p1

OpenBSD OpenSSH 3.5

3.5

OpenBSD OpenSSH 3.5 p1

3.5p1

OpenBSD OpenSSH 3.6

3.6

OpenBSD OpenSSH 3.6.1

3.6.1

OpenBSD OpenSSH 3.6.1 p1

3.6.1p1

OpenBSD OpenSSH 3.6.1 p2

3.6.1p2

OpenBSD OpenSSH 3.7

3.7

OpenBSD OpenSSH 3.7.1

3.7.1

OpenBSD OpenSSH 3.7.1 p1

3.7.1p1

OpenBSD OpenSSH 3.7.1 p2

3.7.1p2

OpenBSD OpenSSH 3.8

3.8

OpenBSD OpenSSH 3.8.1

3.8.1

OpenBSD OpenSSH 3.8.1 p1

3.8.1p1

OpenBSD OpenSSH 3.9

3.9

OpenBSD OpenSSH 3.9.1

3.9.1

OpenBSD OpenSSH 3.9.1 p1

3.9.1p1

OpenBSD OpenSSH 4.0

4.0

OpenBSD OpenSSH Portable 4.0.p1

4.0p1

OpenBSD OpenSSH 4.1

4.1

OpenBSD OpenSSH Portable 4.1.p1

4.1p1

OpenBSD OpenSSH 4.2

4.2

OpenBSD OpenSSH Portable 4.2.p1

4.2p1

OpenBSD OpenSSH 4.3

4.3

OpenBSD OpenSSH Portable 4.3.p1

4.3p1

OpenBSD OpenSSH Portable 4.3.p2

4.3p2

OpenBSD OpenSSH 4.4

4.4

OpenBSD OpenSSH Portable 4.4.p1

4.4p1

OpenBSD OpenSSH 4.5

4.5

OpenBSD OpenSSH 4.6

4.6

OpenBSD OpenSSH 4.7

4.7

OpenBSD OpenSSH 4.8

4.8

OpenBSD OpenSSH 4.9

4.9

OpenBSD OpenSSH 5.0

5.0

OpenBSD OpenSSH 5.1

5.1

OpenBSD OpenSSH 5.2

5.2

OpenBSD OpenSSH 5.3

5.3

OpenBSD OpenSSH 5.4

5.4

OpenBSD OpenSSH 5.5

5.5

OpenBSD OpenSSH 5.6

5.6

OpenBSD OpenSSH 5.7

5.7

OpenBSD OpenSSH

References

RHSA-2012:0884

20110801 Useless OpenSSH resources exhausion bug via GSSAPI

Exploit

http://site.pi3.com.pl/adv/ssh_1.txt

Exploit

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.