NVD

Id
3706  
Name
CVE-2008-3844  
Description
Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-08-27  
Modified Date
2016-11-08  
Seq
2008-3844  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23469 3706 CVE-2008-3844 1020730  View
23470 3706 CVE-2008-3844 http://support.avaya.com/elmodocs2/security/ASA-2008-399.htm  View
23471 3706 CVE-2008-3844 http://www.redhat.com/security/data/openssh-blacklist.html  View
23472 3706 CVE-2008-3844 RHSA-2008:0855  View
23473 3706 CVE-2008-3844 30794  View
23474 3706 CVE-2008-3844 ADV-2008-2821  View
23475 3706 CVE-2008-3844 openssh-rhel-backdoor(44747)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46349 JVNDB-2008-001659 Red Hat Enterprise Linux の OpenSSH パッケージに関する脆弱性 2008年8月に Red Hat GPG key を用いて署名された OpenSSH のための特定の Red Hat Enterprise Linux (RHEL) パッケージには、外部からの改ざん (トロイの木馬) が含まれており、パッケージの著作者に詳細不明な影響がある脆弱性が存在します。 CVE-2008-3844 33957 CVE-2008-3844 3706 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001659.html 2008-08-27 2008-09-17 View