| Package | Affected versions | Patched versions |
|---|---|---|
| openssh | = 3.0= 3.0.1= 3.0.1p1= 3.0.2= 3.0.2p1= 3.0p1= 3.1= 3.1p1= 3.2= 3.2.2p1= 3.2.3p1= 3.3= 3.3p1= 3.4= 3.4p1= 3.5= 3.5p1= 3.6= 3.6.1= 3.6.1p1= 3.6.1p2= 3.7= 3.7.1= 3.7.1p2= 3.8= 3.8.1= 3.8.1p1= 3.9= 3.9.1= 3.9.1p1= 4.0p1= 4.1p1 |
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free