medium6.8Public exploit code
CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OpenSSH SCP Client - Write Arbitrary Files2019-01-11 · remote · multiple
- SCP Client - Multiple Vulnerabilities (SSHtranger Things)2019-01-18 · remote · multiple
Impact
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openbsd | Openssh | through 7.9 |
| Winscp | Winscp | through 5.13 |
| Netapp | Element Software | All versions |
| Netapp | Ontap Select Deploy | All versions |
| Netapp | Storage Automation Store | All versions |
| Siemens | Scalance X204rna Firmware | before 3.2.7 |
| Siemens | Scalance X204rna Eec Firmware | before 3.2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
- https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
- https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
- https://security.gentoo.org/glsa/201903-16
- https://security.netapp.com/advisory/ntap-20190213-0001/
- https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
- https://www.exploit-db.com/exploits/46193/
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-412672.html