IM
IronMonkey Threat Research

CVE-2019-6109 MEDIUM

Published: 2019-01-31 | Last Modified: 2026-06-17 | Status: Modified

Description

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.

Additional Descriptions (1)

Se ha descubierto un problema en OpenSSH 7.9. Debido a la falta de cifrado de caracteres en la pantalla de progreso, un servidor malicioso (o atacante Man-in-the-Middle) puede emplear nombres de objeto manipulados para manipular la salida del cliente, por ejemplo, empleando códigos de control de ANSI para ocultar los archivos adicionales que se están transfiriendo. Esto afecta a refresh_progress_meter() en progressmeter.c.

CVSS Metrics

Base Score: 6.8 (MEDIUM)

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Attack VectorNETWORK
Attack ComplexityHIGH
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 1.6

Impact Score: 5.2

Base Score: 4.0 (MEDIUM)

AV:N/AC:H/Au:N/C:P/I:P/A:N

Access VectorNETWORK
Access ComplexityHIGH
AuthenticationNONE
Confidentiality ImpactPARTIAL
Integrity ImpactPARTIAL
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 4.9

Impact Score: 4.9

Weaknesses

Source Type Description
[email protected] Primary
en CWE-116
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-116

Affected Products

Vendor Product Version Update Type
openbsd openssh * <built-in method update of dict object at 0x7fd36b3bdb40> Application
winscp winscp * <built-in method update of dict object at 0x7fd36b3bd000> Application
canonical ubuntu_linux 14.04 <built-in method update of dict object at 0x7fd36b2326c0> Operating System
canonical ubuntu_linux 16.04 <built-in method update of dict object at 0x7fd3a9005f00> Operating System
canonical ubuntu_linux 18.04 <built-in method update of dict object at 0x7fd36b3bfc00> Operating System
canonical ubuntu_linux 18.10 <built-in method update of dict object at 0x7fd36b3bd3c0> Operating System
debian debian_linux 8.0 <built-in method update of dict object at 0x7fd2d8148680> Operating System
debian debian_linux 9.0 <built-in method update of dict object at 0x7fd36b3bf880> Operating System
netapp element_software - <built-in method update of dict object at 0x7fd36b3bc6c0> Application
netapp ontap_select_deploy - <built-in method update of dict object at 0x7fd36b3bd100> Application
netapp storage_automation_store - <built-in method update of dict object at 0x7fd340146240> Application
fedoraproject fedora 30 <built-in method update of dict object at 0x7fd36b3bc900> Operating System
redhat enterprise_linux 8.0 <built-in method update of dict object at 0x7fd340147640> Operating System
redhat enterprise_linux_eus 8.1 <built-in method update of dict object at 0x7fd39c446000> Operating System
redhat enterprise_linux_eus 8.2 <built-in method update of dict object at 0x7fd2d814aac0> Operating System
redhat enterprise_linux_eus 8.4 <built-in method update of dict object at 0x7fd340146b40> Operating System
redhat enterprise_linux_eus 8.6 <built-in method update of dict object at 0x7fd36b3be840> Operating System
redhat enterprise_linux_server_aus 8.2 <built-in method update of dict object at 0x7fd36b55d780> Operating System
redhat enterprise_linux_server_aus 8.4 <built-in method update of dict object at 0x7fd34948f400> Operating System
redhat enterprise_linux_server_aus 8.6 <built-in method update of dict object at 0x7fd368635ac0> Operating System
redhat enterprise_linux_server_tus 8.2 <built-in method update of dict object at 0x7fd36b55d580> Operating System
redhat enterprise_linux_server_tus 8.4 <built-in method update of dict object at 0x7fd36b3be400> Operating System
redhat enterprise_linux_server_tus 8.6 <built-in method update of dict object at 0x7fd36b232340> Operating System
siemens scalance_x204rna_firmware * <built-in method update of dict object at 0x7fd36b3bdac0> Operating System
siemens scalance_x204rna_eec_firmware * <built-in method update of dict object at 0x7fd385de2c40> Operating System
fujitsu m10-1_firmware * <built-in method update of dict object at 0x7fd2d8149540> Operating System
fujitsu m10-4_firmware * <built-in method update of dict object at 0x7fd36b3be740> Operating System
fujitsu m10-4s_firmware * <built-in method update of dict object at 0x7fd340145b40> Operating System
fujitsu m12-1_firmware * <built-in method update of dict object at 0x7fd340893b80> Operating System
fujitsu m12-2_firmware * <built-in method update of dict object at 0x7fd319c74180> Operating System
fujitsu m12-2s_firmware * <built-in method update of dict object at 0x7fd340891540> Operating System
fujitsu m10-1_firmware * <built-in method update of dict object at 0x7fd36b664740> Operating System
fujitsu m10-4_firmware * <built-in method update of dict object at 0x7fd36a68a780> Operating System
fujitsu m10-4s_firmware * <built-in method update of dict object at 0x7fd36a689300> Operating System
fujitsu m12-1_firmware * <built-in method update of dict object at 0x7fd36945f0c0> Operating System
fujitsu m12-2_firmware * <built-in method update of dict object at 0x7fd36a688600> Operating System
fujitsu m12-2s_firmware * <built-in method update of dict object at 0x7fd3420b9d40> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
Yes cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:netapp:element_software:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:ontap_select_deploy:-:*:*:*:*:*:*:*
Yes cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
Yes cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:scalance_x204rna_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:scalance_x204rna:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:siemens:scalance_x204rna_eec_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:siemens:scalance_x204rna_eec:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*

References