Secunia Logo
Netsikker nu! 2008
 
SUSE update for openssh
Secunia Advisory: SA18850
Release Date: 2006-02-14
Popularity: 6,683 views

Critical:
Not critical
Impact: Privilege escalation
Where: Local system
Solution Status: Vendor Patch

OS:SUSE Linux 10
SuSE Linux 9.1
SUSE Linux 9.2
SUSE Linux 9.3
SuSE Linux Desktop 1.x
SuSE Linux Enterprise Server 8
SUSE Linux Enterprise Server 9

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-0225


Description:
SUSE has issued an update for openssh. This fixes a weakness, which potentially can be exploited by malicious, local users to perform certain actions with escalated privileges.

For more information:
SA18579

Solution:
Apply updated packages.

-- x86 Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/upda.../rpm/i586/openssh-4.1p1-10.4.i586.rpm
3b4e0557d7d0a2b1d23b2c426af95df9
ftp://ftp.suse.com/pub/suse/i386/upda...6/openssh-askpass-4.1p1-10.4.i586.rpm
ac11a5ad265e171674485961472baaaf

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/openssh-3.9p1-12.4.i586.rpm
2c6d16e14134a1a4f1aaba9ac4aef97f
ftp://ftp.suse.com/pub/suse/i386/upda...6/openssh-askpass-3.9p1-12.4.i586.rpm
4cab20c7e83f6de0e440383939e69ec5

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/openssh-3.9p1-3.6.i586.rpm
9b8cf778290ac743fd07445799f79b1f
ftp://ftp.suse.com/pub/suse/i386/upda...86/openssh-askpass-3.9p1-3.6.i586.rpm
003115e216c2b36da09ec3679744ba3d

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/upda...rpm/i586/openssh-4.1p1-11.16.i586.rpm
6e89bdd71e10933bf8e95dc7fad0c289
ftp://ftp.suse.com/pub/suse/i386/upda.../openssh-askpass-4.1p1-11.16.i586.rpm
3d0446f739bcea3715e6945d253b0d53

-- Power PC Platform --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/openssh-4.1p1-10.4.ppc.rpm
3970357da536041d1ae3f7e42655aac7
ftp://ftp.suse.com/pub/suse/i386/upda...pc/openssh-askpass-4.1p1-10.4.ppc.rpm
6a79a95ece5bc7738998adad11205f2f

x86-64 Platform:

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/upda.../x86_64/openssh-4.1p1-10.4.x86_64.rpm
e9eec927db0859a76851d1b94fa7923d
ftp://ftp.suse.com/pub/suse/i386/upda...openssh-askpass-4.1p1-10.4.x86_64.rpm
b4a2b9cf969794d1deb1abd07f192786

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/upda.../x86_64/openssh-3.9p1-12.4.x86_64.rpm
65416ca8578374fa4db63ed9e67f41a3
ftp://ftp.suse.com/pub/suse/i386/upda...openssh-askpass-3.9p1-12.4.x86_64.rpm
3fef6bb43541532a654b09dd46201f69

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/upda...m/x86_64/openssh-3.9p1-3.6.x86_64.rpm
3373a79ef05695446f72fdc1a3ec2d44
ftp://ftp.suse.com/pub/suse/i386/upda.../openssh-askpass-3.9p1-3.6.x86_64.rpm
37ac73c4c9a7723fdcaeb16671b4c6b9

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/x86_64/up...x86_64/openssh-4.1p1-11.16.x86_64.rpm
d04d20e03a63676d5c3349c382318194
ftp://ftp.suse.com/pub/suse/x86_64/up...penssh-askpass-4.1p1-11.16.x86_64.rpm
ea0deb3eef9970963af2c8c0adce6a7b

-- Sources --

SUSE LINUX 10.0:
ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/openssh-4.1p1-10.4.src.rpm
97ffd38b1144c4797d474c7de1eb6f51

SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/src/openssh-3.9p1-12.4.src.rpm
1d43324b9d51941bf60e8e0bcbfa25c7

SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/src/openssh-3.9p1-3.6.src.rpm
647e4b45eba8dd5399c30dcb64db0c91

SUSE LINUX 9.1:
ftp://ftp.suse.com/pub/suse/i386/update/9.1/rpm/src/openssh-4.1p1-11.16.src.rpm
cf86431c7c2b1b0b58f6a5f4fff92893
ftp://ftp.suse.com/pub/suse/x86_64/up...1/rpm/src/openssh-4.1p1-11.16.src.rpm
c04ea03236cd9955c5f21f8c15a35416

Original Advisory:
http://lists.suse.de/archive/suse-security-announce/2006-Feb/0004.html

Other References:
SA18579:
http://secunia.com/advisories/18579/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. WinFTP "PASV" Denial of Service Vulnerability // 39 views
2. My PHP Indexer "d" File Disclosure Vulnerability // 38 views
3. Real Estates Classifieds "cat" SQL Injection Vulnerability // 35 views
4. Ayco Okul "linkid" SQL Injection Vulnerability // 33 views
5. Joomla Ignite Gallery Component "gallery" SQL Injection // 33 views
6. NewLife Blogger "nlb3" SQL Injection Vulnerability // 30 views
7. Joomla OwnBiblio Component "catid" SQL Injection // 28 views
8. Joomla Mad4Joomla Mailforms Component "jid" SQL Injection // 27 views
9. ScriptsEz Mini Hosting Panel "dir" File Disclosure // 25 views
10. Subdreamer Light Global Variables SQL Injection Vulnerability // 24 views