A vulnerability has been reported in SSH Tectia Client/Server, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an unspecified error in the ssh-signer binary. No further information is available.

The vulnerability affects SSH Tectia Client/Server versions 5.0, 5.1, 5.2 to 5.2.3, and 5.3 to 5.3.5 on Linux and UNIX.

Solution
Update to version 5.2.4 or 5.3.6.

Provided and/or discovered by
Tuomas Siren, reported via US-CERT.

Original Advisory
US-CERT VU#921339:
http://www.kb.cert.org/vuls/id/921339

Deep Links
Links available in Customer Area