Improper Wildcard Support in OpenSSH's Configuration Allows Environment Restriction Bypass

CVE-2014-2532

Summary

OpenSSH versions prior to 6.6 contain a vulnerability in the sshd service where improper handling of wildcards in the AcceptEnv directive in the sshd_config file can allow remote attackers to bypass intended environment restrictions. By crafting a specific substring located before a wildcard character, attackers can exploit this flaw to execute arbitrary commands or modify environment variables, possibly leading to unauthorized access or privilege escalation.

References