CVE Feed

    Dashboard / CVE / CVE-2014-9278

    CVE-2014-9278

    The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login.

    Published:Oct 3, 2014
    Last Modified:Apr 12, 2025
    EPS:Dec 6, 2014
    EPSS Score:0.00351
    CVSS Score:4

    Affected Products

    Vendor
    Openbsd
    Product
    Openssh
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Fedora

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2026-73283 (CVSS 2.5) — In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tun…
    CVE-2026-73282 (CVSS 4.8) — In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forward…
    CVE-2026-73281 (CVSS 3.5) — In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locall…
    CVE-2026-60002 (CVSS 7.7) — ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchan…
    CVE-2026-60001 (CVSS 6.5) — sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.…
    CVE-2026-60000 (CVSS 3.7) — sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from ex…
    CVE-2026-59999 (CVSS 5.9) — In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, b…
    CVE-2026-59998 (CVSS 4.8) — sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no v…
    CVE-2026-59997 (CVSS 4.2) — internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be …
    CVE-2026-59996 (CVSS 4.2) — scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occ…

    References

    http://rhn.redhat.com/errata/RHSA-2015-0425.html
    http://thread.gmane.org/gmane.comp.encryption.kerberos.general/15855
    http://www.openwall.com/lists/oss-security/2014/12/02/3
    http://www.openwall.com/lists/oss-security/2014/12/04/17
    http://www.securityfocus.com/bid/71420
    https://bugzilla.mindrot.org/show_bug.cgi?id=1867
    https://bugzilla.redhat.com/show_bug.cgi?id=1169843
    https://exchange.xforce.ibmcloud.com/vulnerabilities/99090
    http://rhn.redhat.com/errata/RHSA-2015-0425.html
    http://thread.gmane.org/gmane.comp.encryption.kerberos.general/15855
    http://www.openwall.com/lists/oss-security/2014/12/02/3
    http://www.openwall.com/lists/oss-security/2014/12/04/17
    http://www.securityfocus.com/bid/71420
    https://bugzilla.mindrot.org/show_bug.cgi?id=1867
    https://bugzilla.redhat.com/show_bug.cgi?id=1169843
    https://exchange.xforce.ibmcloud.com/vulnerabilities/99090

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High