medium6.5Public exploit code
CVE-2008-3234
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Debian OpenSSH - (Authenticated) Remote SELinux Privilege Escalation2008-07-17 · remote · linux · Verified
Impact
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | Version 4.0 |