VULNERABILITY INTELLIGENCE
CVE-2008-3234
CVSS score6.5 MEDIUM
EPSS probability5.77%
CISA KEVNot currently listed
Published2008-07-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Description
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.