CVE-2014-2532
published 2014-03-18CVE-2014-2532: sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment…
PriorityP431medium4.2CVSS 3.1
AVNACHPRLUINSUCLILAN
EPSS
4.75%
90.8th percentile
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | os_x_el_capitan_v10.11 | — | — |
| debian | openssh | < openssh 1:6.6p1-1 (bookworm) | openssh 1:6.6p1-1 (bookworm) |
| openbsd | openssh | <= 6.5 | — |
| openbsd | openssh | — | — |
| openbsd | openssh | — | — |
| openbsd | openssh | — | — |
| openbsd | openssh | — | — |
| openbsd | openssh | — | — |
| openbsd | openssh | >= 0 < 1:6.6p1-1 | 1:6.6p1-1 |
| openbsd | openssh | >= 0 < 1:6.6p1-1 | 1:6.6p1-1 |
| openbsd | openssh | >= 0 < 1:6.6p1-1 | 1:6.6p1-1 |
| openbsd | openssh | >= 0 < 1:6.6p1-1 | 1:6.6p1-1 |
| oracle | communications_user_data_repository | — | — |
| paloalto | pan-os | — | — |
CVSS provenance
nvdv3.14.2MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
nvdv3.04.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv4.9MEDIUM
vendor_debian4.9MEDIUM
vendor_redhat4.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-SA-2020-0004 Informational: Third-party or open source vulnerabilities that do not affect PAN-OS
vendor_paloalto·2020-05-13·CVSS 7.5
CVE-2014-1692 [HIGH] PAN-SA-2020-0004 Informational: Third-party or open source vulnerabilities that do not affect PAN-OS
PAN-SA-2020-0004 Informational: Third-party or open source vulnerabilities that do not affect PAN-OS
Palo Alto Networks Product Security Assurance team has evaluated and determined that these third-party or open source vulnerabilities do not have a security impact on PAN-OS, or the scenarios required for successful
CVEs: CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-5352, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10708, CVE-2016-1908, CVE-2016-3115, CVE-2016-6515, CVE-2018-15473, CVE-2018-15919
Affected products: PAN-OS
Ubuntu
OpenSSH vulnerability
vendor_ubuntu·2014-03-25
CVE-2014-2532 OpenSSH vulnerability
Title: OpenSSH vulnerability
Summary: OpenSSH incorrectly handled environment restrictions with wildcards.
Jann Horn discovered that OpenSSH incorrectly handled wildcards in
AcceptEnv lines. A remote attacker could use this issue to possibly bypass
certain intended environment variable restrictions.
Instructions: In general, a standard system update will make all the necessary changes.
Red Hat
openssh: AcceptEnv environment restriction bypass flaw
vendor_redhat·2014-03-15·CVSS 4.9
CVE-2014-2532 [MEDIUM] CWE-138 openssh: AcceptEnv environment restriction bypass flaw
openssh: AcceptEnv environment restriction bypass flaw
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
It was found that OpenSSH did not properly handle certain AcceptEnv parameter values with wildcard characters. A remote attacker could use this flaw to bypass intended environment variable restrictions.
Statement: This issue affects the version of openssh as shipped with Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this issue as having Low security impact. This issue is not planned to be fixed in Red Hat Enterprise Linux 5 as it is now in Production 3 Phase of the support and mai
Debian
CVE-2014-2532: openssh - sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv line...
vendor_debian·2014·CVSS 4.9
CVE-2014-2532 [MEDIUM] CVE-2014-2532: openssh - sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv line...
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
Scope: local
bookworm: resolved (fixed in 1:6.6p1-1)
bullseye: resolved (fixed in 1:6.6p1-1)
forky: resolved (fixed in 1:6.6p1-1)
sid: resolved (fixed in 1:6.6p1-1)
trixie: resolved (fixed in 1:6.6p1-1)
Apple
CVE-2014-2532: OS X El Capitan v10.11
vendor_apple·CVSS 4.9
CVE-2014-2532 [MEDIUM] CVE-2014-2532: OS X El Capitan v10.11
Apple Security Update: About the security content of OS X El Capitan v10.11
Product: OS X El Capitan v10.11
CVE: CVE-2014-2532
Component: CVE-2014-2532
GHSA
GHSA-qf84-3fjj-8852: sshd in OpenSSH before 6
ghsa_unreviewed·2022-05-14
CVE-2014-2532 [MEDIUM] GHSA-qf84-3fjj-8852: sshd in OpenSSH before 6
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
OSV
CVE-2014-2532: sshd in OpenSSH before 6
osv·2014-03-18·CVSS 4.9
CVE-2014-2532 [MEDIUM] CVE-2014-2532: sshd in OpenSSH before 6
sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw
bugzilla·2014-03-18·CVSS 4.9
CVE-2014-2532 [MEDIUM] CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw
CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw
Common Vulnerabilities and Exposures assigned an identifier CVE-2014-2532 to
the following vulnerability:
Name: CVE-2014-2532
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2532
Assigned: 20140317
Reference: http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2
sshd in OpenSSH before 6.6 does not properly support wildcards on
AcceptEnv lines in sshd_config, which allows remote attackers to
bypass intended environment restrictions by using a substring located
before a wildcard character.
Discussion:
Created openssh tracking bugs for this issue:
Affects: fedora-all [bug 1077853]
---
The sshd_config file by default contain the following AcceptEnv directives.
AcceptEnv LANG LC_CTYPE LC_NUME
Bugzilla
CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw [fedora-all]
bugzilla·2014-03-18·CVSS 4.9
CVE-2014-2532 [MEDIUM] CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw [fedora-all]
CVE-2014-2532 openssh: AcceptEnv environment restriction bypass flaw [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
Please note: this issue
http://advisories.mageia.org/MGASA-2014-0143.htmlhttp://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.aschttp://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.htmlhttp://marc.info/?l=bugtraq&m=141576985122836&w=2http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2http://rhn.redhat.com/errata/RHSA-2014-1552.htmlhttp://secunia.com/advisories/57488http://secunia.com/advisories/57574http://secunia.com/advisories/59313http://secunia.com/advisories/59855http://www.debian.org/security/2014/dsa-2894http://www.mandriva.com/security/advisories?name=MDVSA-2014:068http://www.mandriva.com/security/advisories?name=MDVSA-2015:095http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.securityfocus.com/bid/66355http://www.securitytracker.com/id/1029925http://www.ubuntu.com/usn/USN-2155-1https://exchange.xforce.ibmcloud.com/vulnerabilities/91986https://support.apple.com/HT205267http://advisories.mageia.org/MGASA-2014-0143.htmlhttp://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.aschttp://lists.apple.com/archives/security-announce/2015/Sep/msg00008.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.htmlhttp://marc.info/?l=bugtraq&m=141576985122836&w=2http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2http://rhn.redhat.com/errata/RHSA-2014-1552.htmlhttp://secunia.com/advisories/57488http://secunia.com/advisories/57574http://secunia.com/advisories/59313http://secunia.com/advisories/59855http://www.debian.org/security/2014/dsa-2894http://www.mandriva.com/security/advisories?name=MDVSA-2014:068http://www.mandriva.com/security/advisories?name=MDVSA-2015:095http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.htmlhttp://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlhttp://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.htmlhttp://www.securityfocus.com/bid/66355http://www.securitytracker.com/id/1029925http://www.ubuntu.com/usn/USN-2155-1https://exchange.xforce.ibmcloud.com/vulnerabilities/91986https://support.apple.com/HT205267
2014-03-18
Published