Vulnerability Details CVE-2001-1459
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.2%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=99324968918628&w=2
- http://www.kb.cert.org/vuls/id/797027
- http://www.securityfocus.com/bid/2917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6757
- http://marc.info/?l=bugtraq&m=99324968918628&w=2
- http://www.kb.cert.org/vuls/id/797027
- http://www.securityfocus.com/bid/2917
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6757
Products affected by CVE-2001-1459
-
cpe:2.3:a:openbsd:openssh:2.1
-
cpe:2.3:a:openbsd:openssh:2.1.1
-
cpe:2.3:a:openbsd:openssh:2.2
-
cpe:2.3:a:openbsd:openssh:2.3
-
cpe:2.3:a:openbsd:openssh:2.5
-
cpe:2.3:a:openbsd:openssh:2.5.1
-
cpe:2.3:a:openbsd:openssh:2.5.2
-
cpe:2.3:a:openbsd:openssh:2.9