Lucene search
PRIOn knowledge basePRION:CVE-2019-6110HistoryJan 31, 2019 - 6:29 p.m.
Design/Logic Flaw
2019-01-3118:29:00
PRIOn knowledge base
www.prio-n.com
258
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openssh | le | 7.9 | |
| scalance_x204rna_eec_firmware | lt | 3.2.7 | |
| scalance_x204rna_firmware | lt | 3.2.7 | |
| winscp | le | 5.13 |
References
cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
security.gentoo.org/glsa/201903-16
security.netapp.com/advisory/ntap-20190213-0001/
sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
www.exploit-db.com/exploits/46193/
Related
f5
f5
K42531048 : OpenSSH vulnerability CVE-2019-6110
2019-01-17 00:00:00
K31781390 : January 2019 OpenSSH security vulnerabilities
2019-01-17 00:00:00
nvd
nvd
CVE-2019-6110
2019-01-31 18:29:00
nessus
nessus
F5 Networks BIG-IP : OpenSSH vulnerability (K42531048)
2022-11-08 00:00:00
Photon OS 2.0: Openssh PHSA-2019-2.0-0165
2019-06-24 00:00:00
Photon OS 1.0: Openssh PHSA-2019-1.0-0237
2019-06-25 00:00:00
debiancve
debiancve
CVE-2019-6110
2019-01-31 18:29:00
checkpoint_advisories
checkpoint_advisories
OpenSSH SCP Client Arbitrary File Download (CVE-2019-6110)
2019-03-12 00:00:00
redhatcve
redhatcve
CVE-2019-6110
2019-01-15 00:50:59
ibm
ibm
cvelist
cvelist
CVE-2019-6110
2019-01-31 00:00:00
ubuntucve
ubuntucve
CVE-2019-6110
2019-01-31 00:00:00
attackerkb
attackerkb
CVE-2019-6110
2019-01-31 00:00:00
cve
cve
CVE-2019-6110
2019-01-31 18:29:00
openvas
openvas
PuTTY SCP Multiple Spoofing Vulnerabilities - Windows
2019-01-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0132-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0126-1)
2021-06-09 00:00:00
zdt
zdt
OpenSSH SCP Client - Write Arbitrary Files Exploit
2019-03-08 00:00:00
exploitpack
exploitpack
OpenSSH SCP Client - Write Arbitrary Files
2019-01-11 00:00:00
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
2019-01-18 00:00:00
packetstorm
packetstorm
SSHtranger Things SCP Client File Issue
2019-01-18 00:00:00
exploitdb
exploitdb
SCP Client - Multiple Vulnerabilities (SSHtranger Things)
2019-01-18 00:00:00
OpenSSH SCP Client - Write Arbitrary Files
2019-01-11 00:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2019-03-20 00:00:00
suse
suse
Security update for openssh (important)
2019-01-28 00:00:00
Security update for openssh (important)
2019-01-29 00:00:00
thn
thn
36-Year-Old SCP Clients' Implementation Flaws Discovered
2019-01-15 12:32:00
symantec
symantec
OpenSSH Vulnerabilities Jan-Oct 2019
2020-04-21 20:41:25
photon
photon
Important Photon OS Security Update - PHSA-2019-0017
2019-06-06 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0017
2019-06-06 00:00:00
aix
aix
Vulnerabilities in OpenSSH affect AIX.
2019-07-16 09:38:57
rosalinux
rosalinux
Advisory ROSA-SA-2021-1938
2021-07-02 17:38:20
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov