CVE - CVE-2011-0539

CVE-ID
CVE-2011-0539	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:1025028 URL:http://www.securitytracker.com/id?1025028 MISC:43181 URL:http://secunia.com/advisories/43181 MISC:44269 URL:http://secunia.com/advisories/44269 MISC:46155 URL:http://www.securityfocus.com/bid/46155 MISC:ADV-2011-0284 URL:~~http://www.vupen.com/english/advisories/2011/0284~~ (Obsolete source) MISC:HPSBMA02658 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 MISC:SSRT100413 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777 MISC:[oss-security] 20110204 Re: [vendor-sec] OpenSSH security advisory: legacy certificate signing in 5.6/5.7 URL:http://www.openwall.com/lists/oss-security/2011/02/04/2 MISC:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 URL:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673 MISC:http://www.openssh.com/txt/legacy-cert.adv URL:http://www.openssh.com/txt/legacy-cert.adv MISC:openssh-certificate-info-disclosure(65163) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/65163
Assigning CNA
Red Hat, Inc.
Date Record Created
20110120	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110120)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)