CVE-2005-2666

CVE-2005-2666

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.

EPSS 1,2% · Corrección disponible

Publicación

2005-08-23T04:00:00.000Z

Actualización

2024-08-07T22:45:01.578Z

Pila tecnológica: system · network

Comprueba tu servidor →