CVE-2008-1657

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

Affected products

Alt Linux, Openssh

Openbsd Openssh

= 4.4, 4.4p1, 4.5, 4.6, 4.7, 4.8

Fix

Available

CVSS 2.0

6.5 MEDIUM

EPSS

2.2% (81th percentile)

Weakness

CWE-264

NVD status

Modified

Published

2008-04-02