Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2005-2666
HistoryAug 23, 2005 - 4:00 a.m.

CVE-2005-2666

2005-08-2304:00:00
Debian Security Bug Tracker
security-tracker.debian.org
10

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.8%

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user’s account to generate a list of additional targets that are more likely to have the same password or key.

1.2 Low

CVSS2

Access Vector

LOCAL

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:H/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

29.8%

Related for DEBIANCVE:CVE-2005-2666