CVE-1999-0787: Low severity SSH ssh vulnerability
The SSH authentication agent follows symlinks via a UNIX domain socket.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent exploitation by ensuring the SSH authentication agent socket is not reachable via attacker-controlled symlinks: create agent sockets only in directories that are not world-writable, enforce strict filesystem permissions on the socket and its parent directory, and prevent untrusted users from creating symlinks that point to the agent socket.
- Operational
Detect and remove any existing symlinks that point to SSH authentication agent sockets (e.g., paths referenced by SSH_AUTH_SOCK). After remediation, reinitialize or restart the SSH authentication agent instances to ensure sockets are recreated with correct permissions.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0787?
CVE-1999-0787 is categorized as a high severity vulnerability due to the potential to bypass authentication methods.
How do I fix CVE-1999-0787?
To fix CVE-1999-0787, upgrade the SSH software to a version higher than 1.2.27 where the issue is addressed.
What types of systems are affected by CVE-1999-0787?
CVE-1999-0787 specifically affects systems running SSH version 1.2.27.
What is the exploit vector for CVE-1999-0787?
The exploit vector for CVE-1999-0787 involves following symlinks via a UNIX domain socket which can lead to unauthorized access.
Who can exploit CVE-1999-0787?
CVE-1999-0787 can potentially be exploited by any user with access to the vulnerable SSH agent environment.