CVE

Id
13872  
CVE No.
CVE-2005-2666  
Status
Candidate  
Description
SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user"s account to generate a list of additional targets that are more likely to have the same password or key.  
Phase
Assigned (20050823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
101519 13872 CVE-2005-2666 MISC:http://nms.csail.mit.edu/projects/ssh/  View
101520 13872 CVE-2005-2666 MISC:http://www.eweek.com/article2/0,1759,1815795,00.asp  View
101521 13872 CVE-2005-2666 REDHAT:RHSA-2007:0257  View
101522 13872 CVE-2005-2666 URL:http://www.redhat.com/support/errata/RHSA-2007-0257.html  View
101523 13872 CVE-2005-2666 SCO:SCOSA-2006.11  View
101524 13872 CVE-2005-2666 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt  View
101525 13872 CVE-2005-2666 OVAL:oval:org.mitre.oval:def:10201  View
101526 13872 CVE-2005-2666 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10201  View
101527 13872 CVE-2005-2666 SECUNIA:19243  View
101528 13872 CVE-2005-2666 URL:http://secunia.com/advisories/19243  View
101529 13872 CVE-2005-2666 SECUNIA:25098  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62614 JVNDB-2005-000834 Computer Associates Message Queuing ソフトウェアに複数のバッファオーバーフローの脆弱性 Computer Associates 社製品に含まれる Message Queuing software には、遠隔の第三者によって任意のコードが実行できる問題を含む、複数のバッファオーバーフロー脆弱性が存在します。 CVE-2005-2668 13872 10 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000834.html  View