Severity : Low Published : 2012-01-27 Modified : 2012-02-16 Base Score : 3.5 Details : The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory. Product/Version : Carrier Grade CGE 5.1   Pro 4.x   CGE 4.x   Mobilinux 4.x   Mobilinux 5.0.24   MVL 5 Atom   Pro 5.0.24   MVL 5 OMAP3   MVL 5 OMAP3530   Pro 5.0   CGE 5.x   Mobilinux 5.x

CVE-2012-4565 CVE-2012-4508 CVE-2012-4444 CVE-2012-4423 CVE-2012-3524 CVE-2012-3511 CVE-2012-3509 CVE-2012-3417 CVE-2012-3401 CVE-2012-3400 CVE-2012-2333 CVE-2012-2319 CVE-2012-2313 CVE-2012-2141 CVE-2012-2131 CVE-2012-2123 CVE-2012-2111 CVE-2012-2110 CVE-2012-2100 CVE-2012-1667 CVE-2012-1182 CVE-2012-1165 CVE-2012-1164 CVE-2012-1146 CVE-2012-1097 CVE-2012-0884 CVE-2012-0879 CVE-2012-0840 CVE-2012-0815 CVE-2012-0814 CVE-2012-0061 CVE-2012-0060 CVE-2012-0053 CVE-2012-0044 CVE-2012-0038 CVE-2012-0031 CVE-2012-0029 CVE-2012-0028 CVE-2012-0027