NVD

Id
4945  
Name
CVE-2008-5161  
Description
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-11-19  
Modified Date
2017-01-02  
Seq
2008-5161  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
30990 4945 CVE-2008-5161 http://isc.sans.org/diary.html?storyid=5366  View
30991 4945 CVE-2008-5161 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
30992 4945 CVE-2008-5161 APPLE-SA-2009-11-09-1  View
30993 4945 CVE-2008-5161 SSRT090062  View
30994 4945 CVE-2008-5161 http://openssh.org/txt/cbc.adv  View
30995 4945 CVE-2008-5161 oval:org.mitre.oval:def:11279  View
30996 4945 CVE-2008-5161 RHSA-2009:1287  View
30997 4945 CVE-2008-5161 247186  View
30998 4945 CVE-2008-5161 http://support.apple.com/kb/HT3937  View
30999 4945 CVE-2008-5161 http://support.attachmate.com/techdocs/2398.html  View
31000 4945 CVE-2008-5161 http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm  View
31001 4945 CVE-2008-5161 http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt  View
31002 4945 CVE-2008-5161 VU#958563  View
31003 4945 CVE-2008-5161 http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html  View
31004 4945 CVE-2008-5161 20081121 OpenSSH security advisory: cbc.adv  View
31005 4945 CVE-2008-5161 20081123 Revised: OpenSSH security advisory: cbc.adv  View
31006 4945 CVE-2008-5161 32319  View
31007 4945 CVE-2008-5161 1021235  View
31008 4945 CVE-2008-5161 1021236  View
31009 4945 CVE-2008-5161 1021382  View
31010 4945 CVE-2008-5161 http://www.ssh.com/company/news/article/953/  View
31011 4945 CVE-2008-5161 ADV-2008-3172  View
31012 4945 CVE-2008-5161 ADV-2008-3173  View
31013 4945 CVE-2008-5161 ADV-2008-3409  View
31014 4945 CVE-2008-5161 ADV-2009-1135  View
31015 4945 CVE-2008-5161 ADV-2009-3184  View
31016 4945 CVE-2008-5161 openssh-sshtectia-cbc-info-disclosure(46620)  View
31017 4945 CVE-2008-5161 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667  View
31018 4945 CVE-2008-5161 https://kc.mcafee.com/corporate/index?page=content&id=SB10106  View
31019 4945 CVE-2008-5161 https://kc.mcafee.com/corporate/index?page=content&id=SB10163  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46653 JVNDB-2008-001963 SSH 通信において一部データが漏えいする可能性 SSH（Secure Shell）は、ネットワークを介してインターネット上に置かれているサーバにログインしたり、 コマンドを実行したりするためのプログラムおよび通信プロトコルで、データは暗号化された状態で通信が行なわれます。 SSH で使用される通信方式の一部に対する攻撃方法が報告されています。 CVE-2008-5161 35274 CVE-2008-5161 4945 2.6 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001963.html 2008-11-17 2012-05-14 View