REDHAT-BUG-1169843: Low severity openssh vulnerability

Published Dec 2, 2014

Updated

IssueDescription:

In a Kerberos environment, OpenSSH allows remote, authenticated users to log in as another user if they are listed in a ~/.k5users file of that other user. This unexpectedly alters the system security policy, as expressed through the ~/.k5users file, because previously, users would have to log in locally, potentially requiring different forms of authentication, before they could use the ksu command to switch users.

Affected Software

1 affected component

OpenSSH OpenSSH

Event History

Dec 2, 2014

Data Sourced

via Red Hat·02:48 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1169843?

REDHAT-BUG-1169843 is classified as a medium severity vulnerability due to its ability to alter system security policy.

How do I fix REDHAT-BUG-1169843?

To fix REDHAT-BUG-1169843, it's essential to review and modify the ~/.k5users file permissions and access controls appropriately.

Who is affected by REDHAT-BUG-1169843?

Users in a Kerberos environment running vulnerable versions of OpenSSH are affected by REDHAT-BUG-1169843.

What is the impact of REDHAT-BUG-1169843?

The impact of REDHAT-BUG-1169843 allows remote authenticated users to log in as another user, compromising account isolation.

Is there a workaround for REDHAT-BUG-1169843?

A temporary workaround for REDHAT-BUG-1169843 is to restrict access to the ~/.k5users file until an official patch is applied.