Vyatta – Linux & Open Source Alternative to Cisco – Advanced Routing, Firewall, VPN, QoS..
Free Download ->

LK2008: The values of the Linux community

LWN.net Weekly Edition for October 9, 2008

LWN.net Weekly Edition for October 2, 2008

Weekly edition	Kernel	Security	Distributions	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ

openssh: log file corruption

Package(s):

openssh

CVE #(s):

CVE-2007-3102

Created:

November 15, 2007

Updated:

November 20, 2007

Description:

The ssh server can incorrectly write account names to the audit subsystem. A remote attacker can inject strings with parts of audit messages in order to corrupt logs. This can mislead administrators and confuse log parsing tools.

Alerts:

Red Hat	RHSA-2007:0703-02	2007-11-15
Red Hat	RHSA-2007:0737-02	2007-11-15

(Log in to post comments)

openssh: log file corruption

Posted Dec 10, 2007 20:46 UTC (Mon) by kreutzm (subscriber, #4700) [Link]

"This is a redhat/fedora specific issue"