CVE-2007-3102 β€” Openssh vulnerability

10 documents7 sources
Severity
4.3MEDIUMNVD
EPSS
2.6%
top 14.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 18
Latest updateMay 1

Description

Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party information.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

β–ΆNVDopenbsd/openssh4.3p2

πŸ”΄Vulnerability Details

2
GHSA
GHSA-pjxv-8cr6-cx99: Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4β†—2022-05-01
β–Ά
CVEList
CVE-2007-3102: Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4β†—2007-10-18
β–Ά

πŸ’₯Exploits & PoCs

1
Exploit-DB
Microsoft Internet Explorer - GDI+ (PoC) (MS08-052)β†—2008-09-28
β–Ά

πŸ“‹Vendor Advisories

2
Red Hat
audit logging of failed logins↗2007-11-07
β–Ά
Debian
CVE-2007-3102: openssh - Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4....β†—2007
β–Ά

πŸ’¬Community

4
Bugzilla
CVE-2007-3102 audit logging of failed logins↗2007-07-12
β–Ά
Bugzilla
CVE-2007-3102 audit logging of failed logins↗2007-07-12
β–Ά
Bugzilla
CVE-2007-3102 audit logging of failed logins↗2007-07-11
β–Ά
Bugzilla
CVE-2007-3102 audit logging of failed logins↗2007-06-07
β–Ά
CVE-2007-3102 β€” Openbsd Openssh vulnerability | cvebase