CVE search · CVE-2005-2146
CVE-2005-2146
medium 4.6
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- NVD-CWE-Other
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | medium 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- ssh · tectia_server
References
- http://secunia.com/advisories/15894PatchVendor Advisory
- http://www.ssh.com/company/newsroom/article/653/PatchVendor Advisory
- http://secunia.com/advisories/15894PatchVendor Advisory
- http://www.ssh.com/company/newsroom/article/653/PatchVendor Advisory