CVE-2008-3234

CVSS 6.5 - MEDIUM
Description

sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.

Affected Products
2
Vendor Product Version
openbsd openssh 4.0
debian debian_linux All versions
Weakness Types
CWE-264
CVE Information
CVE ID:
CVE-2008-3234
Published:
2008-07-18
Modified:
2026-04-23
CVSS Score:
6.5
Severity:
MEDIUM
Vector:
AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Vendors
debian openbsd
Quick Actions
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL