[Bug 227322] [NEW] [openssh] [CVE-2008-1657] possibility to bypass global "ForceCommand" directive

[hk47]

*** This bug is a security vulnerability ***

Public security bug reported:

Quoting CVE-2008-1657:
"OpenSSH before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file."

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New

** Visibility changed to: Public

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1657

-- 
[openssh] [CVE-2008-1657] possibility to bypass global "ForceCommand" directive
https://bugs.launchpad.net/bugs/227322
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openssh in ubuntu.