Boletines de Vulnerabilidades

int(1852)

Boletines de Vulnerabilidades

Denegación de servicio en OpenSSH
Clasificación de la vulnerabilidad
Propiedad	Valor
Nivel de Confianza	Oficial
Impacto	Denegación de Servicio
Dificultad	Avanzado
Requerimientos del atacante	Acceso remoto con cuenta
Información sobre el sistema
Propiedad	Valor
Fabricante afectado	GNU/Linux
Software afectado	OpenSSH 3.6.1p2, 3.7.1p2
Descripción
Se ha descubierto una vulnerabilidad en OpenSSH 3.6.1p2 y 3.7.1p2. La vulnerabilidad reside en sshd.c que no finaliza las conexiones una vez que el tiempo de sesión "LoginGraceTime" ha finalizado. Un atacante remoto podría causar una denegación de servicio mediante el agotamiento de conexiones.
Solución
Actualización de software Red Hat Red Hat Desktop (v. 3) / SRPMS openssh-3.6.1p2-33.30.6.src.rpm Red Hat Desktop (v. 3) / IA-32 openssh-3.6.1p2-33.30.6.i386.rpm openssh-askpass-3.6.1p2-33.30.6.i386.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.i386.rpm openssh-clients-3.6.1p2-33.30.6.i386.rpm openssh-server-3.6.1p2-33.30.6.i386.rpm Red Hat Desktop (v. 3) / x86_64 openssh-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.x86_64.rpm openssh-clients-3.6.1p2-33.30.6.x86_64.rpm openssh-server-3.6.1p2-33.30.6.x86_64.rpm Red Hat Enterprise Linux AS (v. 3) / SRPMS openssh-3.6.1p2-33.30.6.src.rpm Red Hat Enterprise Linux AS (v. 3) / IA-32 openssh-3.6.1p2-33.30.6.i386.rpm openssh-askpass-3.6.1p2-33.30.6.i386.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.i386.rpm openssh-clients-3.6.1p2-33.30.6.i386.rpm openssh-server-3.6.1p2-33.30.6.i386.rpm Red Hat Enterprise Linux AS (v. 3) / IA-64 openssh-3.6.1p2-33.30.6.ia64.rpm openssh-askpass-3.6.1p2-33.30.6.ia64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.ia64.rpm openssh-clients-3.6.1p2-33.30.6.ia64.rpm openssh-server-3.6.1p2-33.30.6.ia64.rpm Red Hat Enterprise Linux AS (v. 3) / PPC openssh-3.6.1p2-33.30.6.ppc.rpm openssh-askpass-3.6.1p2-33.30.6.ppc.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.ppc.rpm openssh-clients-3.6.1p2-33.30.6.ppc.rpm openssh-server-3.6.1p2-33.30.6.ppc.rpm Red Hat Enterprise Linux AS (v. 3) / s390 openssh-3.6.1p2-33.30.6.s390.rpm openssh-askpass-3.6.1p2-33.30.6.s390.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.s390.rpm openssh-clients-3.6.1p2-33.30.6.s390.rpm openssh-server-3.6.1p2-33.30.6.s390.rpm Red Hat Enterprise Linux AS (v. 3) / s390x openssh-3.6.1p2-33.30.6.s390x.rpm openssh-askpass-3.6.1p2-33.30.6.s390x.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.s390x.rpm openssh-clients-3.6.1p2-33.30.6.s390x.rpm openssh-server-3.6.1p2-33.30.6.s390x.rpm Red Hat Enterprise Linux AS (v. 3) / x86_64 openssh-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.x86_64.rpm openssh-clients-3.6.1p2-33.30.6.x86_64.rpm openssh-server-3.6.1p2-33.30.6.x86_64.rpm Red Hat Enterprise Linux ES (v. 3) / SRPMS openssh-3.6.1p2-33.30.6.src.rpm Red Hat Enterprise Linux ES (v. 3) / IA-32 openssh-3.6.1p2-33.30.6.i386.rpm openssh-askpass-3.6.1p2-33.30.6.i386.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.i386.rpm openssh-clients-3.6.1p2-33.30.6.i386.rpm openssh-server-3.6.1p2-33.30.6.i386.rpm Red Hat Enterprise Linux ES (v. 3) / IA-64 openssh-3.6.1p2-33.30.6.ia64.rpm openssh-askpass-3.6.1p2-33.30.6.ia64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.ia64.rpm openssh-clients-3.6.1p2-33.30.6.ia64.rpm openssh-server-3.6.1p2-33.30.6.ia64.rpm Red Hat Enterprise Linux ES (v. 3) / x86_64 openssh-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.x86_64.rpm openssh-clients-3.6.1p2-33.30.6.x86_64.rpm openssh-server-3.6.1p2-33.30.6.x86_64.rpm Red Hat Enterprise Linux WS (v. 3) / SRPMS openssh-3.6.1p2-33.30.6.src.rpm Red Hat Enterprise Linux WS (v. 3) / IA-32 openssh-3.6.1p2-33.30.6.i386.rpm openssh-askpass-3.6.1p2-33.30.6.i386.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.i386.rpm openssh-clients-3.6.1p2-33.30.6.i386.rpm openssh-server-3.6.1p2-33.30.6.i386.rpm Red Hat Enterprise Linux WS (v. 3) / IA-64 openssh-3.6.1p2-33.30.6.ia64.rpm openssh-askpass-3.6.1p2-33.30.6.ia64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.ia64.rpm openssh-clients-3.6.1p2-33.30.6.ia64.rpm openssh-server-3.6.1p2-33.30.6.ia64.rpm Red Hat Enterprise Linux WS (v. 3) / x86_64 openssh-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-3.6.1p2-33.30.6.x86_64.rpm openssh-askpass-gnome-3.6.1p2-33.30.6.x86_64.rpm openssh-clients-3.6.1p2-33.30.6.x86_64.rpm openssh-server-3.6.1p2-33.30.6.x86_64.rpm SGI Advanced Linux Environment 3 / RPM / Patch 10227 ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/RPMS Advanced Linux Environment 3 / SRPM / Patch 10227 ftp://oss.sgi.com/projects/sgi_propack/download/3/updates/SRPMS
Identificadores estándar
Propiedad	Valor
CVE	CAN-2004-2069
BID
Recursos adicionales
Red Hat Security Advisory (RHSA-2005:550-6) https://rhn.redhat.com/errata/RHSA-2005-550.html SGI Security Advisory (20051002-01-U) ftp://patches.sgi.com/support/free/security/advisories/20051002-01-U.asc