CVE-2015-6565: sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to ca...

Security readout for executives and security teams

CVE-2015-6565 is an old OpenSSH server issue in versions 6.8 and 6.9. sshd could leave terminal devices writable by local users, allowing terminal disruption and possibly broader impact. Business risk is highest on legacy Linux or appliance systems that still allow local shell access to untrusted users. Exposure is likely limited to systems running OpenSSH 6.8 or 6.9, especially legacy Linux distributions, appliances, or managed platforms that bundled those versions. Internet exposure alone is not enough; the attacker generally needs local user access or another foothold. Prioritize within normal vulnerability remediation, escalating for shared shell hosts, bastions, and appliances with untrusted local users. Current supported platforms are less likely to be exposed, but legacy systems should be checked. Mitigation focus: Inventory OpenSSH versions on servers and appliances.; Prioritize systems running OpenSSH 6.8 or 6.9.; Upgrade OpenSSH using vendor-supported packages or firmware..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.