Unspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, allows remote attackers to write arbitrary characters to an audit log via a crafted username. NOTE: some of these details are obtained from third party information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Fedora_core | Fedora_project | 6 (including) | 6 (including) |
| Red Hat Enterprise Linux 4 | RedHat | openssh-0:3.9p1-8.RHEL4.24 | * |
| Red Hat Enterprise Linux 4 | RedHat | pam-0:0.77-66.23 | * |
| Red Hat Enterprise Linux 5 | RedHat | openssh-0:4.3p2-24.el5 | * |
| Red Hat Enterprise Linux 5 | RedHat | pam-0:0.99.6.2-3.26.el5 | * |