Lucene search
K

9 matches found

OpenVAS
OpenVAS
added 2009/03/23 12:0 a.m.20 views

Ubuntu Update for openssh update USN-612-5

Ubuntu Update for Linux kernel vulnerabilities USN-612-5 OpenVAS Vulnerability Test $Id: gbubuntuUSN6125.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for openssh update USN-612-5 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

5CVSS0.00356EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2008/05/27 12:0 a.m.34 views

Debian Security Advisory DSA 1576-2 (openssh)

The remote host is missing an update to openssh announced via advisory DSA 1576-2. OpenVAS Vulnerability Test $Id: deb15762.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1576-2 openssh Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

7.8CVSS6.6AI score0.04768EPSS
Exploits6
UbuntuCve
UbuntuCve
added 2008/05/18 2:20 p.m.26 views

CVE-2008-2285

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

5CVSS6AI score0.00356EPSS
Exploits0References2
NVD
NVD
added 2008/05/18 2:20 p.m.18 views

CVE-2008-2285

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

5CVSS6.3AI score0.00356EPSS
Exploits0References2
Prion
Prion
added 2008/05/18 2:20 p.m.39 views

Authentication flaw

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorizedkeys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool...

5CVSS5.6AI score0.04768EPSS
Exploits6References2Affected Software1
CVE
CVE
added 2008/05/18 2:0 p.m.69 views

CVE-2008-2285

CVE-2008-2285 stems from ssh-vulnkey failing to recognize authorized_keys lines containing options, enabling exploitation links to CVE-2008-0166 via weak OpenSSL PRNG. The underlying issue (CVE-2008-0166) is Debian/OpenSSL PRNG predictability caused by seeding with PID alone, drastically limiting...

5CVSS6.3AI score0.00356EPSS
Exploits0References2Affected Software1
Debian
Debian
added 2008/05/16 4:14 p.m.46 views

[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

------------------------------------------------------------------------ Debian Security Advisory DSA-1576-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 16, 2008 http://www.debian.org/security/faq -...

7.8CVSS6.2AI score0.04768EPSS
Exploits6
Tenable Nessus
Tenable Nessus
added 2008/05/16 12:0 a.m.40 views

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)

Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as 'no-port-forwarding' or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...

7.8CVSS6.5AI score0.04768EPSS
Exploits6References3
OSV
OSV
added 2008/05/14 12:0 a.m.59 views

DSA-1576-1 openssh openssh-blacklist - predictable randomness

Bulletin has no description...

7.8CVSS6.6AI score0.04768EPSS
Exploits7
Rows per page
Query Builder