CVE-2008-5124

2008-11-1800:00:00

mitre

www.cve.org

AI Score

6.5

Confidence

Low

EPSS

0.01

Percentile

83.3%

JSON

JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks.

References

secunia.com/advisories/30822

securityreason.com/securityalert/4606

www.jscape.com/sftpapplet/docs/HTML/index.html?introhistory.html

www.securityfocus.com/archive/1/493569/100/0/threaded

www.securityfocus.com/archive/1/493652/100/0/threaded

www.securityfocus.com/bid/29882

www.securitytracker.com/id?1020346

www.vupen.com/english/advisories/2008/1919/references

exchange.xforce.ibmcloud.com/vulnerabilities/43300