NVD

Id
42886  
Name
CVE-2012-0814  
Description
The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-01-27  
Modified Date
2016-12-07  
Seq
2012-0814  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
215778 42886 CVE-2012-0814 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445  View
215779 42886 CVE-2012-0814 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673  View
215780 42886 CVE-2012-0814 [oss-security] 20120126 CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients  View
215781 42886 CVE-2012-0814 [oss-security] 20120126 Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients  View
215782 42886 CVE-2012-0814 [oss-security] 20120126 Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients  View
215783 42886 CVE-2012-0814 [oss-security] 20120127 Re: CVE Request: Debian (others?) openssh-server: Forced Command handling leaks private information to ssh clients  View
215784 42886 CVE-2012-0814 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c  View
215785 42886 CVE-2012-0814 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c.diff?r1=1.53;r2=1.54  View
215786 42886 CVE-2012-0814 51702  View
215787 42886 CVE-2012-0814 opensshserver-commands-info-disc(72756)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25532 JVNDB-2012-001239 OpenSSH における重要な情報を取得される脆弱性 OpenSSH 内の sshd にある auth-options.c の auth_parse_options 関数は、authorized_keys コマンドオプションを含んだデバッグメッセージを出力するため、重要な情報を取得される脆弱性が存在します。 CVE-2012-0814 54052 CVE-2012-0814 42886 3.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001239.html 2012-01-27 2013-05-27 View