CVE-2011-2390

In CVE-2011-2390, Ubuntu describes a misconfiguration in the kdump/mkdumprd OpenSSH integration where the default StrictHostKeyChecking is set to no. This enables a remote attacker controlling a malicious kdump server to impersonate the legitimate server and access security sensitive information ...