OSVDB ID: 1387 Title: FreeBSD SSH Port Extra Network Port |
Info |
|
|
Dates |
||||
|
|
Description |
SSH port in FreeBSD contains a misconfiguration in its sshd_config file that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when the SSH daemon is configured to listen on network port 722, in addition to the usual port 22. This flaw may allow malicious users to bypass firewall restrictions and lead to a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Misconfiguration Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades or patches to correct this issue. While various solutions are available, it is possible to fully correct the flaw by simply removing the line "Port 722" in /usr/local/etc/sshd_config and restarting sshd. |
Products |
|
References |
|
Credit |
|
best.com -