NVD

Id
7599  
Name
CVE-2011-0539  
Description
The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-02-10  
Modified Date
2016-12-07  
Seq
2011-0539  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42911 7599 CVE-2011-0539 SSRT100413  View
42912 7599 CVE-2011-0539 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673  View
42913 7599 CVE-2011-0539 http://www.openssh.com/txt/legacy-cert.adv  View
42914 7599 CVE-2011-0539 [oss-security] 20110204 Re: [vendor-sec] OpenSSH security advisory: legacy certificate signing in 5.6/5.7  View
42915 7599 CVE-2011-0539 46155  View
42916 7599 CVE-2011-0539 1025028  View
42917 7599 CVE-2011-0539 ADV-2011-0284  View
42918 7599 CVE-2011-0539 openssh-certificate-info-disclosure(65163)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31009 JVNDB-2011-001248 OpenSSH の key_certify 関数におけるスタックメモリ領域の重要なコンテンツ情報を取得される脆弱性 OpenSSH の usr.bin/ssh/key.c 内にある ssh-keygen の key_certify 関数は、-t command-line option の使用を伴う古い形式の証明書を生成する際、nonce フィールドの初期化を行わないため、スタックメモリ領域の重要なコンテンツ情報を取得される、またはハッシュ衝突攻撃を誘導される脆弱性が存在します。 CVE-2011-0539 48446 CVE-2011-0539 7599 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001248.html 2011-02-10 2011-03-17 View