National Cyber Awareness System

Vulnerability Summary for CVE-2007-3102

Overview

Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party information.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2007-715

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00214.html

External Source: MISC

Name: https://bugzilla.redhat.com/show_bug.cgi?id=248059

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=248059

External Source: SECUNIA

Name: 27235

Type: Advisory

Hyperlink:http://secunia.com/advisories/27235

External Source: OVAL

Name: oval:org.mitre.oval:def:11124

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11124

External Source: OSVDB

Name: 39214

Hyperlink:http://osvdb.org/39214

External Source: BID

Name: 26097

Hyperlink:http://www.securityfocus.com/bid/26097

External Source: REDHAT

Name: RHSA-2007:0737

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0737.html

External Source: REDHAT

Name: RHSA-2007:0703

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0703.html

External Source: REDHAT

Name: RHSA-2007:0555

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0555.html

External Source: REDHAT

Name: RHSA-2007:0540

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0540.html

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2007-526.htm

External Source: SECUNIA

Name: 28320

Hyperlink:http://secunia.com/advisories/28320

External Source: SECUNIA

Name: 28319

Hyperlink:http://secunia.com/advisories/28319

External Source: SECUNIA

Name: 27590

Hyperlink:http://secunia.com/advisories/27590

External Source: SECUNIA

Name: 27588

Hyperlink:http://secunia.com/advisories/27588

References to Check Content

Identifier:oval:org.mitre.oval:def:11124

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11124