OpenSSH CVE-2016-3115 Remote Command Injection Vulnerability
Openssh 5.3 P1102w
| Bugtraq ID: | 84314 |
| Class: | Input Validation Error |
| CVE: | CVE-2016-3115 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 10 2016 12:00AM |
| Updated: | Jan 23 2017 04:05AM |
| Credit: | tintinweb |
| Vulnerable: | Slackware Slackware Linux 14.1 Slackware Linux x86_64 -current Slackware Linux 14.1 x86_64 Slackware Linux 14.0 x86_64 Slackware Linux 14.0 Slackware Linux 13.37 x86_64 Slackware Linux 13.37 Slackware Linux 13.1 x86_64 Slackware Linux 13.1 Slackware Linux 13.0 x86_64 Slackware Linux 13.0 Slackware Linux -current Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Oracle VM Server for x86 3.4 Oracle VM Server for x86 3.3 Oracle VM Server for x86 3.2 Oracle Solaris 11.3 Oracle Solaris 10 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Oracle Enterprise Linux 5 OpenSSH OpenSSH 4.2 OpenSSH OpenSSH 4.1 p1 OpenSSH OpenSSH 4.1 OpenSSH OpenSSH 4.0 p1 OpenSSH OpenSSH 4.0 OpenSSH OpenSSH 3.9 p1 OpenSSH OpenSSH 3.8.1 p1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 OpenSSH OpenSSH 3.8 p1 OpenSSH OpenSSH 3.7.2 p1 OpenSSH OpenSSH 3.7.1 p2 OpenSSH OpenSSH 3.7.1 p1 + SCO Open Server 5.0.7 OpenSSH OpenSSH 3.7.1 OpenSSH OpenSSH 3.7 p1 OpenSSH OpenSSH 3.7 .1p2 OpenSSH OpenSSH 3.7 OpenSSH OpenSSH 3.6.1 p2 OpenSSH OpenSSH 3.6.1 p1 OpenSSH OpenSSH 3.6.1 OpenSSH OpenSSH 3.5 p1 OpenSSH OpenSSH 3.5 OpenSSH OpenSSH 3.4 p1-7 OpenSSH OpenSSH 3.4 p1-6 OpenSSH OpenSSH 3.4 p1-5 OpenSSH OpenSSH 3.4 p1-4 OpenSSH OpenSSH 3.4 p1-3 OpenSSH OpenSSH 3.4 p1-2 OpenSSH OpenSSH 3.4 p1-1 OpenSSH OpenSSH 3.4 p1 + Conectiva Linux Enterprise Edition 1.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + FreeBSD FreeBSD 5.0 + FreeBSD FreeBSD 4.7 -RELEASE + FreeBSD FreeBSD 4.7 + IBM AIX 5.1 L + IBM AIX 4.3.3 + Immunix Immunix OS 7+ + Redhat Linux 8.0 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 + Slackware Linux 8.1 OpenSSH OpenSSH 3.4 OpenSSH OpenSSH 3.3 p1 OpenSSH OpenSSH 3.3 OpenSSH OpenSSH 3.2.3 p1 OpenSSH OpenSSH 3.2.2 p1 OpenSSH OpenSSH 3.2 + OpenBSD OpenBSD 3.1 OpenSSH OpenSSH 3.1 p1 + Juniper NetScreen-IDP 10 3.0 r2 + Juniper NetScreen-IDP 10 3.0 r1 + Juniper NetScreen-IDP 10 3.0 + Juniper NetScreen-IDP 100 3.0 r2 + Juniper NetScreen-IDP 100 3.0 r1 + Juniper NetScreen-IDP 100 3.0 + Juniper NetScreen-IDP 1000 3.0 r2 + Juniper NetScreen-IDP 1000 3.0 r1 + Juniper NetScreen-IDP 1000 3.0 + Juniper NetScreen-IDP 500 3.0 r2 + Juniper NetScreen-IDP 500 3.0 r1 + Juniper NetScreen-IDP 500 3.0 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 + Redhat Linux 7.3 + Redhat Linux 7.2 + Redhat Linux 7.1 + Redhat Linux for iSeries 7.1 + Redhat Linux for pSeries 7.1 + Slackware Linux 8.1 + Sun Linux 5.0.7 + Sun Solaris 9 + Trustix Secure Linux 1.5 + Trustix Secure Linux 1.2 + Trustix Secure Linux 1.1 OpenSSH OpenSSH 3.1 OpenSSH OpenSSH 3.0.2 p1 OpenSSH OpenSSH 3.0.2 OpenSSH OpenSSH 3.0.1 p1 OpenSSH OpenSSH 3.0.1 OpenSSH OpenSSH 3.0 p1 OpenSSH OpenSSH 3.0 OpenSSH OpenSSH 2.9.9 + NetBSD NetBSD 1.5.2 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.2 OpenSSH OpenSSH 2.9 p2 OpenSSH OpenSSH 2.9 p1 - IBM AIX 4.3.3 - IBM AIX 4.3.2 - IBM AIX 4.3.1 - IBM AIX 4.3 OpenSSH OpenSSH 2.9 OpenSSH OpenSSH 2.5.2 OpenSSH OpenSSH 2.5.1 OpenSSH OpenSSH 2.5 OpenSSH OpenSSH 2.3 - S.u.S.E. Linux 7.0 sparc - S.u.S.E. Linux 7.0 ppc - S.u.S.E. Linux 7.0 i386 - S.u.S.E. Linux 7.0 alpha - S.u.S.E. Linux 6.4 ppc - S.u.S.E. Linux 6.4 i386 - S.u.S.E. Linux 6.4 alpha OpenSSH OpenSSH 2.2 .0p1 OpenSSH OpenSSH 2.2 OpenSSH OpenSSH 2.1.1 + S.u.S.E. Linux 7.0 sparc + S.u.S.E. Linux 7.0 ppc + S.u.S.E. Linux 7.0 i386 + S.u.S.E. Linux 7.0 alpha OpenSSH OpenSSH 2.1 OpenSSH OpenSSH 1.2.3 OpenSSH OpenSSH 1.2.2 OpenSSH OpenSSH 7.1p2 OpenSSH OpenSSH 7.1p1 OpenSSH OpenSSH 7.1 OpenSSH OpenSSH 7.0 OpenSSH OpenSSH 6.9p1 OpenSSH OpenSSH 6.9 OpenSSH OpenSSH 6.8 OpenSSH OpenSSH 6.6 OpenSSH OpenSSH 6.5 OpenSSH OpenSSH 6.4 OpenSSH OpenSSH 6.3 OpenSSH OpenSSH 6.2p2 OpenSSH OpenSSH 6.2p1 OpenSSH OpenSSH 6.2 OpenSSH OpenSSH 6.1 OpenSSH OpenSSH 6.0 OpenSSH OpenSSH 5.8 p2 OpenSSH OpenSSH 5.8 OpenSSH OpenSSH 5.7 OpenSSH OpenSSH 5.6p1 OpenSSH OpenSSH 5.6 OpenSSH OpenSSH 5.5 OpenSSH OpenSSH 5.4 OpenSSH OpenSSH 5.3 OpenSSH OpenSSH 5.2p1 OpenSSH OpenSSH 5.2 OpenSSH OpenSSH 5.1 OpenSSH OpenSSH 5.0p1 OpenSSH OpenSSH 5.0 OpenSSH OpenSSH 4.9 OpenSSH OpenSSH 4.8 OpenSSH OpenSSH 4.7p1 OpenSSH OpenSSH 4.7 OpenSSH OpenSSH 4.6p1 OpenSSH OpenSSH 4.6 OpenSSH OpenSSH 4.5 OpenSSH OpenSSH 4.4.p1 OpenSSH OpenSSH 4.4 OpenSSH OpenSSH 4.3p2 OpenSSH OpenSSH 4.3p1 OpenSSH OpenSSH 4.3.0 OpenSSH OpenSSH 4.2p1 Juniper Nsmexpress - Juniper NSM4000 0 Juniper Nsm3000 - IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.4.0 IBM Vios 2.2.3.50 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.6 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM Security Access Manager for Web 8.0.1 IBM Security Access Manager for Web 8.0 3 IBM Security Access Manager for Web 8.0 2 IBM Security Access Manager for Web 8.0.1.4 IBM Security Access Manager for Web 8.0.1.3 IBM Security Access Manager for Web 8.0.1.2 IBM Security Access Manager for Web 8.0.1.1 IBM Security Access Manager for Web 8.0.1.0 IBM Security Access Manager for Web 8.0.0.5 IBM Security Access Manager for Web 8.0.0.4 IBM Security Access Manager for Web 8.0.0.0 IBM Security Access Manager for Web 7.0 IBM Security Access Manager for Mobile 8.0.1 IBM Security Access Manager for Mobile 8.0.1.4 IBM Security Access Manager for Mobile 8.0.1.3 IBM Security Access Manager for Mobile 8.0.1.2 IBM Security Access Manager for Mobile 8.0.1.1 IBM Security Access Manager for Mobile 8.0.0.5 IBM Security Access Manager for Mobile 8.0.0.4 IBM Security Access Manager for Mobile 8.0.0.3 IBM Security Access Manager for Mobile 8.0.0.2 IBM Security Access Manager for Mobile 8.0.0.1 IBM Security Access Manager for Mobile 8.0.0.0 IBM Security Access Manager 9.0 IBM Power HMC 8.5.0.0 IBM Power HMC 8.4.0.0 IBM Power HMC 8.3.0.0 IBM Power HMC 8.2.0.0 IBM Power HMC 8.1.0.0 IBM Power HMC 7.9.0.0 IBM OpenSSH for GPFS for Windows 3.5 IBM Flex System Manager 1.3.2 IBM Flex System Manager 1.3.4.0 IBM Flex System Manager 1.3.3.0 IBM Aix 7.2 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3 FreeBSD Freebsd 9.3-RELEASE-p10 FreeBSD Freebsd 10.2-RELEASE-p9 FreeBSD Freebsd 10.2-RELEASE-p8 FreeBSD Freebsd 10.2-RELEASE-p6 FreeBSD Freebsd 10.2-RELEASE-p13 FreeBSD Freebsd 10.2-RELEASE-p12 FreeBSD Freebsd 10.2-RELEASE-p11 FreeBSD Freebsd 10.2-RELEASE-p10 FreeBSD Freebsd 10.2-RC2-p1 FreeBSD Freebsd 10.2-RC1-p2 FreeBSD Freebsd 10.2-RC1-p1 FreeBSD Freebsd 10.2-BETA3 FreeBSD Freebsd 10.2-BETA2-p3 FreeBSD Freebsd 10.2-BETA2-p2 FreeBSD Freebsd 10.2 FreeBSD Freebsd 10.1-RELEASE-p9 FreeBSD Freebsd 10.1-RELEASE-p6 FreeBSD Freebsd 10.1-RELEASE-p5 FreeBSD Freebsd 10.1-RELEASE-p30 FreeBSD Freebsd 10.1-RELEASE-p29 FreeBSD Freebsd 10.1-RELEASE-p28 FreeBSD Freebsd 10.1-RELEASE-p27 FreeBSD Freebsd 10.1-RELEASE-p26 FreeBSD Freebsd 10.1-RELEASE-p25 FreeBSD Freebsd 10.1-RELEASE-p23 FreeBSD Freebsd 10.1-RELEASE-p19 FreeBSD Freebsd 10.1-RELEASE-p17 FreeBSD Freebsd 10.1-RELEASE-p16 FreeBSD FreeBSD 10.1-RELEASE-p1 FreeBSD FreeBSD 10.1-RC4-p1 FreeBSD FreeBSD 10.1-RC3-p1 FreeBSD FreeBSD 10.1-RC2-p3 FreeBSD FreeBSD 10.1-RC2-p1 FreeBSD FreeBSD 10.1-RC1-p1 FreeBSD FreeBSD 10.1-PRERELEASE FreeBSD FreeBSD 10.1-BETA3-p1 FreeBSD FreeBSD 10.1-BETA1-p1 FreeBSD FreeBSD 10.1 FreeBSD FreeBSD 10.0-STABLE FreeBSD FreeBSD 10.0-RELEASE-p9 FreeBSD FreeBSD 10.0-RELEASE-p8 FreeBSD FreeBSD 10.0-RELEASE-p7 FreeBSD FreeBSD 10.0-RELEASE-p6 FreeBSD FreeBSD 10.0-RELEASE-p5 FreeBSD FreeBSD 10.0-RELEASE-p4 FreeBSD FreeBSD 10.0-RELEASE-p2 FreeBSD FreeBSD 10.0-RELEASE-p13 FreeBSD FreeBSD 10.0-RELEASE-p12 FreeBSD FreeBSD 10.0-RELEASE-p10 FreeBSD FreeBSD 10.0-RELEASE-p1 FreeBSD FreeBSD 10.0-RC3-p1 FreeBSD FreeBSD 10.0-RC2-p1 FreeBSD FreeBSD 10.0-RC1-p1 FreeBSD FreeBSD 10.0-BETA FreeBSD FreeBSD 10.0 CentOS CentOS 7 CentOS CentOS 6 |
| Not Vulnerable: | Oracle Solaris 11.3 SRU9.4 OpenSSH OpenSSH 7.2p2 IBM OpenSSH for GPFS for Windows 3.5.0.31 FreeBSD FreeBSD 9.3-STABLE FreeBSD Freebsd 9.3-RELEASE-p39 FreeBSD Freebsd 10.3-RC2 FreeBSD Freebsd 10.2-STABLE FreeBSD Freebsd 10.2-RELEASE-p14 FreeBSD Freebsd 10.1-RELEASE-p31 |
RAID stands for Redundant Array of Inexpensive (Independent) Disks.
Of and to in a is that for on ##AT##-##AT## with The are be I this as it we by have not you which will from ( at ) or has an can our European was all: also ' - 's your We. Openssh 1:5.3p1-3ubuntu7.1 source package in Ubuntu. Diff from 1:5.3p1-3ubuntu3 (in Ubuntu) to 1:5.3p1-3ubuntu7.1 (2.3 KiB).
On most situations you will be using one of the following four levels of RAIDs.
Openssh 5.3 P1 Exploit
- RAID 0
- RAID 1
- RAID 5
- RAID 10 (also known as RAID 1+0)
This article explains the main difference between these raid levels along with an easy to understand diagram.
In all the diagrams mentioned below:
- A, B, C, D, E and F – represents blocks
- p1, p2, and p3 – represents parity
RAID LEVEL 0
Following are the key points to remember for RAID level 0.
Openssh 5.3p1 Exploit
- Minimum 2 disks.
- Excellent performance ( as blocks are striped ).
- No redundancy ( no mirror, no parity ).
- Don’t use this for any critical system.
Openssh 5.3 P1005
RAID LEVEL 1
Following are the key points to remember for RAID level 1.
- Minimum 2 disks.
- Good performance ( no striping. no parity ).
- Excellent redundancy ( as blocks are mirrored ).
RAID LEVEL 5
Following are the key points to remember for RAID level 5.
Openssh 5.3 P1102
- Minimum 3 disks.
- Good performance ( as blocks are striped ).
- Good redundancy ( distributed parity ).
- Best cost effective option providing both performance and redundancy. Use this for DB that is heavily read oriented. Write operations will be slow.
RAID LEVEL 10
Following are the key points to remember for RAID level 10.
- Minimum 4 disks.
- This is also called as “stripe of mirrors”
- Excellent redundancy ( as blocks are mirrored )
- Excellent performance ( as blocks are striped )
- If you can afford the dollar, this is the BEST option for any mission critical applications (especially databases).
Additional RAID Tutorials: