Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2005-2798

Published: 06/09/2005 Updated: 19/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Openssh

Vulnerability Summary

sshd in OpenSSH prior to 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

openbsd openssh 3.1p1

openbsd openssh 3.2

openbsd openssh 3.5

openbsd openssh 3.5p1

openbsd openssh 3.7.1p2

openbsd openssh 3.8

openbsd openssh 3.8.1

openbsd openssh 3.0

openbsd openssh 3.0.1

openbsd openssh 3.0.1p1

openbsd openssh 3.2.2p1

openbsd openssh 3.2.3p1

openbsd openssh 3.6

openbsd openssh 3.6.1

openbsd openssh 3.8.1p1

openbsd openssh 3.9

openbsd openssh 3.0p1

openbsd openssh 3.1

openbsd openssh 3.4

openbsd openssh 3.4p1

openbsd openssh 3.7

openbsd openssh 3.7.1

openbsd openssh 4.0p1

openbsd openssh 4.1p1

openbsd openssh 3.0.2

openbsd openssh 3.0.2p1

openbsd openssh 3.3

openbsd openssh 3.3p1

openbsd openssh 3.6.1p1

openbsd openssh 3.6.1p2

openbsd openssh 3.9.1

openbsd openssh 3.9.1p1

Vendor Advisories

Red Hat: openssh security update
Synopsis openssh security update Type/Severity Security Advisory: Moderate Topic Updated openssh packages that fix a security issue, bugs, and add supportfor recording login user IDs for audit are now available for Red HatEnterprise Linux 4This update has been rated as having moderate security impact by t ...
Ubuntu Security Notice: openssh vulnerability
An information disclosure vulnerability has been found in the SSH server When the GSSAPIAuthentication option was enabled, the SSH server could send GSSAPI credentials even to users who attempted to log in with a method other than GSSAPI This could inadvertently expose these credentials to an untrusted user ...

References

NVD-CWE-Otherhttp://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.htmlhttp://secunia.com/advisories/16686http://www.mandriva.com/security/advisories?name=MDKSA-2005:172ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txthttp://secunia.com/advisories/18010http://secunia.com/advisories/18406http://www.redhat.com/support/errata/RHSA-2005-527.htmlhttp://secunia.com/advisories/17077http://secunia.com/advisories/17245http://www.securityfocus.com/bid/14729http://support.avaya.com/elmodocs2/security/ASA-2006-016.htmhttp://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.htmlhttp://secunia.com/advisories/18717http://secunia.com/advisories/18507http://support.avaya.com/elmodocs2/security/ASA-2006-033.htmhttp://www.osvdb.org/19141http://securitytracker.com/id?1014845http://www.vupen.com/english/advisories/2006/0144http://secunia.com/advisories/18661https://exchange.xforce.ibmcloud.com/vulnerabilities/24064https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345https://usn.ubuntu.com/209-1/http://www.securityfocus.com/archive/1/421411/100/0/threadedhttps://access.redhat.com/errata/RHSA-2005:527https://usn.ubuntu.com/209-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook