CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0814

The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.4%

CVSS Severity

CVSS v2 Score 3.5

References

Products affected by CVE-2012-0814

Openbsd » Openssh » Version: N/A

cpe:2.3:a:openbsd:openssh:-
Openbsd » Openssh » Version: 1.2

cpe:2.3:a:openbsd:openssh:1.2
Openbsd » Openssh » Version: 1.2.1

cpe:2.3:a:openbsd:openssh:1.2.1
Openbsd » Openssh » Version: 1.2.2

cpe:2.3:a:openbsd:openssh:1.2.2
Openbsd » Openssh » Version: 1.2.27

cpe:2.3:a:openbsd:openssh:1.2.27
Openbsd » Openssh » Version: 1.2.3

cpe:2.3:a:openbsd:openssh:1.2.3
Openbsd » Openssh » Version: 1.3

cpe:2.3:a:openbsd:openssh:1.3
Openbsd » Openssh » Version: 1.5

cpe:2.3:a:openbsd:openssh:1.5
Openbsd » Openssh » Version: 1.5.7

cpe:2.3:a:openbsd:openssh:1.5.7
Openbsd » Openssh » Version: 1.5.8

cpe:2.3:a:openbsd:openssh:1.5.8
Openbsd » Openssh » Version: 2

cpe:2.3:a:openbsd:openssh:2
Openbsd » Openssh » Version: 2.1

cpe:2.3:a:openbsd:openssh:2.1
Openbsd » Openssh » Version: 2.1.0

cpe:2.3:a:openbsd:openssh:2.1.0
Openbsd » Openssh » Version: 2.1.1

cpe:2.3:a:openbsd:openssh:2.1.1
Openbsd » Openssh » Version: 2.2

cpe:2.3:a:openbsd:openssh:2.2
Openbsd » Openssh » Version: 2.2.0

cpe:2.3:a:openbsd:openssh:2.2.0
Openbsd » Openssh » Version: 2.3

cpe:2.3:a:openbsd:openssh:2.3
Openbsd » Openssh » Version: 2.3.0

cpe:2.3:a:openbsd:openssh:2.3.0
Openbsd » Openssh » Version: 2.3.1

cpe:2.3:a:openbsd:openssh:2.3.1
Openbsd » Openssh » Version: 2.5

cpe:2.3:a:openbsd:openssh:2.5
Openbsd » Openssh » Version: 2.5.1

cpe:2.3:a:openbsd:openssh:2.5.1
Openbsd » Openssh » Version: 2.5.2

cpe:2.3:a:openbsd:openssh:2.5.2
Openbsd » Openssh » Version: 2.9

cpe:2.3:a:openbsd:openssh:2.9
Openbsd » Openssh » Version: 2.9.9

cpe:2.3:a:openbsd:openssh:2.9.9
Openbsd » Openssh » Version: 2.9.9p2

cpe:2.3:a:openbsd:openssh:2.9.9p2
Openbsd » Openssh » Version: 2.9p1

cpe:2.3:a:openbsd:openssh:2.9p1
Openbsd » Openssh » Version: 2.9p2

cpe:2.3:a:openbsd:openssh:2.9p2
Openbsd » Openssh » Version: 3.0

cpe:2.3:a:openbsd:openssh:3.0
Openbsd » Openssh » Version: 3.0.1

cpe:2.3:a:openbsd:openssh:3.0.1
Openbsd » Openssh » Version: 3.0.1p1

cpe:2.3:a:openbsd:openssh:3.0.1p1
Openbsd » Openssh » Version: 3.0.2

cpe:2.3:a:openbsd:openssh:3.0.2
Openbsd » Openssh » Version: 3.0.2p1

cpe:2.3:a:openbsd:openssh:3.0.2p1
Openbsd » Openssh » Version: 3.0p1

cpe:2.3:a:openbsd:openssh:3.0p1
Openbsd » Openssh » Version: 3.1

cpe:2.3:a:openbsd:openssh:3.1
Openbsd » Openssh » Version: 3.1p1

cpe:2.3:a:openbsd:openssh:3.1p1
Openbsd » Openssh » Version: 3.2

cpe:2.3:a:openbsd:openssh:3.2
Openbsd » Openssh » Version: 3.2.2

cpe:2.3:a:openbsd:openssh:3.2.2
Openbsd » Openssh » Version: 3.2.2p1

cpe:2.3:a:openbsd:openssh:3.2.2p1
Openbsd » Openssh » Version: 3.2.3

cpe:2.3:a:openbsd:openssh:3.2.3
Openbsd » Openssh » Version: 3.2.3p1

cpe:2.3:a:openbsd:openssh:3.2.3p1
Openbsd » Openssh » Version: 3.3

cpe:2.3:a:openbsd:openssh:3.3
Openbsd » Openssh » Version: 3.3p1

cpe:2.3:a:openbsd:openssh:3.3p1
Openbsd » Openssh » Version: 3.4

cpe:2.3:a:openbsd:openssh:3.4
Openbsd » Openssh » Version: 3.4p1

cpe:2.3:a:openbsd:openssh:3.4p1
Openbsd » Openssh » Version: 3.5

cpe:2.3:a:openbsd:openssh:3.5
Openbsd » Openssh » Version: 3.5p1

cpe:2.3:a:openbsd:openssh:3.5p1
Openbsd » Openssh » Version: 3.6

cpe:2.3:a:openbsd:openssh:3.6
Openbsd » Openssh » Version: 3.6.1

cpe:2.3:a:openbsd:openssh:3.6.1
Openbsd » Openssh » Version: 3.6.1p1

cpe:2.3:a:openbsd:openssh:3.6.1p1
Openbsd » Openssh » Version: 3.6.1p2

cpe:2.3:a:openbsd:openssh:3.6.1p2
Openbsd » Openssh » Version: 3.7

cpe:2.3:a:openbsd:openssh:3.7
Openbsd » Openssh » Version: 3.7.1

cpe:2.3:a:openbsd:openssh:3.7.1
Openbsd » Openssh » Version: 3.7.1p1

cpe:2.3:a:openbsd:openssh:3.7.1p1
Openbsd » Openssh » Version: 3.7.1p2

cpe:2.3:a:openbsd:openssh:3.7.1p2
Openbsd » Openssh » Version: 3.8

cpe:2.3:a:openbsd:openssh:3.8
Openbsd » Openssh » Version: 3.8.1

cpe:2.3:a:openbsd:openssh:3.8.1
Openbsd » Openssh » Version: 3.8.1p1

cpe:2.3:a:openbsd:openssh:3.8.1p1
Openbsd » Openssh » Version: 3.9

cpe:2.3:a:openbsd:openssh:3.9
Openbsd » Openssh » Version: 3.9.1

cpe:2.3:a:openbsd:openssh:3.9.1
Openbsd » Openssh » Version: 3.9.1p1

cpe:2.3:a:openbsd:openssh:3.9.1p1
Openbsd » Openssh » Version: 4.0

cpe:2.3:a:openbsd:openssh:4.0
Openbsd » Openssh » Version: 4.0p1

cpe:2.3:a:openbsd:openssh:4.0p1
Openbsd » Openssh » Version: 4.1

cpe:2.3:a:openbsd:openssh:4.1
Openbsd » Openssh » Version: 4.1p1

cpe:2.3:a:openbsd:openssh:4.1p1
Openbsd » Openssh » Version: 4.2

cpe:2.3:a:openbsd:openssh:4.2
Openbsd » Openssh » Version: 4.2p1

cpe:2.3:a:openbsd:openssh:4.2p1
Openbsd » Openssh » Version: 4.3

cpe:2.3:a:openbsd:openssh:4.3
Openbsd » Openssh » Version: 4.3p1

cpe:2.3:a:openbsd:openssh:4.3p1
Openbsd » Openssh » Version: 4.3p2

cpe:2.3:a:openbsd:openssh:4.3p2
Openbsd » Openssh » Version: 4.4

cpe:2.3:a:openbsd:openssh:4.4
Openbsd » Openssh » Version: 4.4p1

cpe:2.3:a:openbsd:openssh:4.4p1
Openbsd » Openssh » Version: 4.5

cpe:2.3:a:openbsd:openssh:4.5
Openbsd » Openssh » Version: 4.6

cpe:2.3:a:openbsd:openssh:4.6
Openbsd » Openssh » Version: 4.7

cpe:2.3:a:openbsd:openssh:4.7
Openbsd » Openssh » Version: 4.7p1

cpe:2.3:a:openbsd:openssh:4.7p1
Openbsd » Openssh » Version: 4.8

cpe:2.3:a:openbsd:openssh:4.8
Openbsd » Openssh » Version: 4.9

cpe:2.3:a:openbsd:openssh:4.9
Openbsd » Openssh » Version: 5.0

cpe:2.3:a:openbsd:openssh:5.0
Openbsd » Openssh » Version: 5.1

cpe:2.3:a:openbsd:openssh:5.1
Openbsd » Openssh » Version: 5.2

cpe:2.3:a:openbsd:openssh:5.2
Openbsd » Openssh » Version: 5.3

cpe:2.3:a:openbsd:openssh:5.3
Openbsd » Openssh » Version: 5.4

cpe:2.3:a:openbsd:openssh:5.4
Openbsd » Openssh » Version: 5.5

cpe:2.3:a:openbsd:openssh:5.5
Openbsd » Openssh » Version: 5.6

cpe:2.3:a:openbsd:openssh:5.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-0814

Products

Pricing

Contact Us