CVE-2016-1235

The oarsh script in OAR before 2.5.7 allows remote authenticated users of a cluster to obtain sensitive information and possibly gain privileges via vectors related to OpenSSH options.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
debianCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 75%
VendorProductVersion
oar_projectoar
𝑥
≤ 2.5.6
debiandebian_linux
8.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
oar
bookworm
2.5.9-1
fixed
bullseye
2.5.9-1
fixed
sid
2.5.10-2
fixed
trixie
2.5.10-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
oar
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
not-affected
hirsute
not-affected
groovy
not-affected
focal
not-affected
eoan
not-affected
disco
not-affected
cosmic
not-affected
bionic
not-affected
artful
ignored
zesty
ignored
yakkety
ignored
xenial
needed
wily
Fixed 2.5.4-2+deb8u1build0.15.10.1
released
trusty
Fixed 2.5.2-4.1ubuntu0.1~esm1
released
precise
dne
Common Weakness Enumeration
References
http://oar.imag.fr/oar_2.5.7
http://www.debian.org/security/2016/dsa-3543
https://raw.githubusercontent.com/oar-team/oar/ce77ffed620fdce94881c9b35064507777c24a1c/debian/patches/004-fix-oarsh-security-issue
http://oar.imag.fr/oar_2.5.7
http://www.debian.org/security/2016/dsa-3543
https://raw.githubusercontent.com/oar-team/oar/ce77ffed620fdce94881c9b35064507777c24a1c/debian/patches/004-fix-oarsh-security-issue