Maple Labs

CVE search · CVE-2008-5161

CVE-2008-5161

low 3.7

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-200, CWE-329

Severity

VersionScoreVectorSource
CVSS 3.1 low 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary
CVSS 2.0 low 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N nvd@nist.govPrimary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • openbsd · openssh
  • ssh · tectia_client
  • ssh · tectia_connector
  • ssh · tectia_connectsecure
  • ssh · tectia_server

References