Lucene search
PRIOn knowledge basePRION:CVE-2008-2285HistoryMay 18, 2008 - 2:20 p.m.
Authentication flaw
2008-05-1814:20:00
PRIOn knowledge base
www.prio-n.com
6
5.6 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.1%
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.
Related
cve
cve
debiancve
debiancve
CVE-2008-2285
2008-05-18 14:20:00
CVE-2008-0166
2008-05-13 17:20:00
ubuntucve
ubuntucve
CVE-2008-2285
2008-05-18 00:00:00
CVE-2008-0166
2008-05-13 00:00:00
nessus
nessus
Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)
2008-05-16 00:00:00
Ubuntu 7.04 / 7.10 / 8.04 LTS : openvpn vulnerability (USN-612-3)
2008-05-16 00:00:00
Weak Debian OpenSSH Keys in ~/.ssh/authorized_keys
2008-05-15 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1576-1)
2008-05-27 00:00:00
Debian: Security Advisory (DSA-1576-1)
2008-05-27 00:00:00
Ubuntu: Security Advisory (USN-612-5)
2009-03-23 00:00:00
ubuntu
ubuntu
OpenSSH update
2008-05-14 00:00:00
OpenVPN vulnerability
2008-05-13 00:00:00
OpenSSH update
2008-05-20 00:00:00
debian
debian
[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness
2008-05-16 16:14:27
[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness
2008-05-16 16:14:27
[SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness
2008-05-14 09:24:56
prion
prion
Code injection
2008-05-13 17:20:00
Design/Logic Flaw
2021-05-21 20:15:00
securityvulns
securityvulns
[USN-612-1] OpenSSL vulnerability
2008-05-14 00:00:00
[USN-612-2] OpenSSH vulnerability
2008-05-14 00:00:00
Linux distributives OpenSSH / OpenSSL weak random generator
2008-05-15 00:00:00
cert
cert
osv
osv
openssh openssh-blacklist - predictable randomness
2008-05-14 00:00:00
openssl - predictable random number generator
2008-05-13 00:00:00
avleonov
avleonov
Vulnerability Management at Tinkoff Fintech School
2019-03-04 10:38:31
5.6 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.002 Low
EPSS
Percentile
60.1%
Related for PRION:CVE-2008-2285