Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-2285
HistoryMay 18, 2008 - 2:20 p.m.

CVE-2008-2285

2008-05-1814:20:00
CWE-310
[email protected]
web.nvd.nist.gov
2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%

JSON

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.

Affected configurations

NVD
Node
ubuntulinuxMatch7.04
OR
ubuntulinuxMatch7.10
OR
ubuntulinuxMatch8.04

Related

cve 3
ubuntucve 2
debiancve 2
prion 3
cvelist 3
nessus 11
openvas 20
ubuntu 6
securityvulns 3
cert 1
redhatcve 1
debian 4
nvd 2
osv 2
avleonov 1
cve
cve
CVE-2008-2285
2008-05-18 14:20:00
CVE-2008-0166
2008-05-13 17:20:00
CVE-2008-3280
2021-05-21 20:15:07
ubuntucve
ubuntucve
CVE-2008-2285
2008-05-18 00:00:00
CVE-2008-0166
2008-05-13 00:00:00
debiancve
debiancve
CVE-2008-2285
2008-05-18 14:20:00
CVE-2008-0166
2008-05-13 17:20:00
prion
prion
Authentication flaw
2008-05-18 14:20:00
Code injection
2008-05-13 17:20:00
Design/Logic Flaw
2021-05-21 20:15:00
cvelist
cvelist
CVE-2008-2285
2008-05-18 14:00:00
CVE-2008-0166
2008-05-13 17:00:00
CVE-2008-3280
2021-05-21 19:23:55
nessus
nessus
Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)
2008-05-16 00:00:00
Weak Debian OpenSSH Keys in ~/.ssh/authorized_keys
2008-05-15 00:00:00
Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn vulnerability (USN-612-3)
2008-05-16 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1576-1)
2008-05-27 00:00:00
Debian: Security Advisory (DSA-1576-1)
2008-05-27 00:00:00
Ubuntu: Security Advisory (USN-612-5)
2009-03-23 00:00:00
ubuntu
ubuntu
OpenSSH update
2008-05-14 00:00:00
ssl-cert vulnerability
2008-05-14 00:00:00
OpenSSH update
2008-05-20 00:00:00
securityvulns
securityvulns
[USN-612-1] OpenSSL vulnerability
2008-05-14 00:00:00
Linux distributives OpenSSH / OpenSSL weak random generator
2008-05-15 00:00:00
[USN-612-2] OpenSSH vulnerability
2008-05-14 00:00:00
cert
cert
Debian and Ubuntu OpenSSL packages contain a predictable random number generator
2008-05-15 00:00:00
redhatcve
redhatcve
CVE-2008-0166
2015-10-30 10:12:49
debian
debian
[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness
2008-05-16 16:14:27
[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness
2008-05-16 16:14:27
[SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator
2008-05-13 12:06:39
nvd
nvd
CVE-2008-0166
2008-05-13 17:20:00
CVE-2008-3280
2021-05-21 20:15:07
osv
osv
openssl - predictable random number generator
2008-05-13 00:00:00
openssh openssh-blacklist - predictable randomness
2008-05-14 00:00:00
avleonov
avleonov
Vulnerability Management at Tinkoff Fintech School
2019-03-04 10:38:31

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%

JSON
Related for NVD:CVE-2008-2285
cve3ubuntucve2debiancve2prion3cvelist3nessus11openvas20ubuntu6securityvulns3cert1redhatcve1debian4nvd2osv2avleonov1