Security Advisory
CVE-2014-2653
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.