CVE-2017-15906

Description

The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

Affected (27)

Products: Openbsd: Openssh · Oracle: Sun Zfs Storage Appliance Kit · Debian: Debian Linux · +2 more

Show all products

Openbsd

1 product

Openssh

Oracle

1 product

Sun Zfs Storage Appliance Kit

Debian

1 product

Debian Linux

Netapp

12 products

Active Iq Unified Manager

Oncommand Unified Manager Core Package

Solidfire

Steelstore Cloud Integrated Storage

Storage Replication Adapter For Clustered Data Ontap

Vasa Provider For Clustered Data Ontap

Virtual Storage Console

Cn1610 Firmware

Redhat

6 products

Enterprise Linux Desktop

Enterprise Linux Eus

Enterprise Linux Server

Enterprise Linux Server Aus

Enterprise Linux Server Tus

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Before 7.6

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Oracle Sun Zfs Storage Appliance Kit	Version 8.8.6

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0

Configuration D

14 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Backup	All versions
Netapp Clustered Data Ontap	All versions
Netapp Data Ontap Edge	All versions
Netapp Hci Management Node	All versions
Netapp Oncommand Unified Manager Core Package	All versions
Netapp Solidfire	All versions
Netapp Steelstore Cloud Integrated Storage	All versions
Netapp Storage Replication Adapter For Clustered Data Ontap	From 9.7
Netapp Storage Replication Adapter For Clustered Data Ontap	Version 9.6
Netapp Vasa Provider For Clustered Data Ontap	From 6.0 to 6.2
Netapp Vasa Provider For Clustered Data Ontap	From 9.7
Netapp Virtual Storage Console	From 9.7
Netapp Virtual Storage Console	Version 9.6

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp Cn1610 Firmware	All versions

Running on/with	Platform Versions
Netapp Cn1610	All versions

Configuration F

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Eus	Version 7.6
Redhat Enterprise Linux Eus	Version 7.7
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server Aus	Version 7.6
Redhat Enterprise Linux Server Aus	Version 7.7
Redhat Enterprise Linux Server Tus	Version 7.6
Redhat Enterprise Linux Server Tus	Version 7.7
Redhat Enterprise Linux Workstation	Version 7.0