NVD

Id
30948  
Name
CVE-2014-2532  
Description
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-03-18  
Modified Date
2017-01-06  
Seq
2014-2532  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
162755 30948 CVE-2014-2532 http://advisories.mageia.org/MGASA-2014-0143.html  View
162756 30948 CVE-2014-2532 http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc  View
162757 30948 CVE-2014-2532 APPLE-SA-2015-09-30-3  View
162758 30948 CVE-2014-2532 FEDORA-2014-6569  View
162759 30948 CVE-2014-2532 FEDORA-2014-6380  View
162760 30948 CVE-2014-2532 SSRT101487  View
162761 30948 CVE-2014-2532 [security-announce] 20140315 Announce: OpenSSH 6.6 released  View
162762 30948 CVE-2014-2532 RHSA-2014:1552  View
162763 30948 CVE-2014-2532 59855  View
162764 30948 CVE-2014-2532 DSA-2894  View
162765 30948 CVE-2014-2532 MDVSA-2014:068  View
162766 30948 CVE-2014-2532 MDVSA-2015:095  View
162767 30948 CVE-2014-2532 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
162768 30948 CVE-2014-2532 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
162769 30948 CVE-2014-2532 66355  View
162770 30948 CVE-2014-2532 1029925  View
162771 30948 CVE-2014-2532 USN-2155-1  View
162772 30948 CVE-2014-2532 openssh-cve20142532-sec-bypass(91986)  View
162773 30948 CVE-2014-2532 https://support.apple.com/HT205267  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12843 JVNDB-2014-001718 OpenSSH の sshd における環境による制限を回避される脆弱性 OpenSSH の sshd は、sshd_config 内の AcceptEnv 行のワイルドカードを適切にサポートしないため、環境 (変数) による制限を回避される脆弱性が存在します。 CVE-2014-2532 69819 CVE-2014-2532 30948 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001718.html 2014-03-16 2016-11-22 View