CVE-2008-3234
The MITRE CVE dictionary describes this issue as:
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appending a :/ (colon slash) sequence, followed by the role name, to the username.
Find out more about CVE-2008-3234 from the MITRE CVE dictionary dictionary and NIST NVD.
Statement
Upon investigating this issue, the Red Hat Security Response Team has determined that this is not a vulnerability. The ability to specify a desired role when connecting to OpenSSH is a feature of how OpenSSH interacts with SELinux. Users can only assign themselves SELinux roles which they have permission to access. They cannot assign themselves arbitrary roles.
CVE description copyright © 2017, The MITRE Corporation