Vulnerability Details CVE-2001-1459
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=99324968918628&w=2
- http://www.kb.cert.org/vuls/id/797027
- http://www.securityfocus.com/bid/2917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6757
- http://marc.info/?l=bugtraq&m=99324968918628&w=2
- http://www.kb.cert.org/vuls/id/797027
- http://www.securityfocus.com/bid/2917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6757
Products affected by CVE-2001-1459
-
cpe:2.3:a:openbsd:openssh:2.1
-
cpe:2.3:a:openbsd:openssh:2.1.1
-
cpe:2.3:a:openbsd:openssh:2.2
-
cpe:2.3:a:openbsd:openssh:2.3
-
cpe:2.3:a:openbsd:openssh:2.5
-
cpe:2.3:a:openbsd:openssh:2.5.1
-
cpe:2.3:a:openbsd:openssh:2.5.2
-
cpe:2.3:a:openbsd:openssh:2.9