← Database

CVE-2008-1657

MEDIUM CVSS: 6.5 Published: 2008-04-02 Modified: 2026-06-16

Description

OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.

Affected Platforms

Openbsd Openssh

Weakness Type

CWE-264

References