ssh on HP Tru64 UNIX 5.1B and 5.1A does not properly handle RSA signatures when digital certificates and RSA keys are used, which could allow local and remote attackers to gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tru64 | Compaq | 5.1a (including) | 5.1a (including) |
| Tru64 | Compaq | 5.1a_pk1_bl1 (including) | 5.1a_pk1_bl1 (including) |
| Tru64 | Compaq | 5.1a_pk2_bl2 (including) | 5.1a_pk2_bl2 (including) |
| Tru64 | Compaq | 5.1a_pk3_bl3 (including) | 5.1a_pk3_bl3 (including) |
| Tru64 | Compaq | 5.1a_pk4_bl21 (including) | 5.1a_pk4_bl21 (including) |
| Tru64 | Compaq | 5.1a_pk5_bl23 (including) | 5.1a_pk5_bl23 (including) |
| Tru64 | Compaq | 5.1b_pk2_bl22 (including) | 5.1b_pk2_bl22 (including) |