Lucene search
HistoryJul 05, 2005 - 4:00 a.m.
CVE-2005-2146
cve-2005-2146
ssh tectia server
ssh secure shell
windows servers
insecure permissions
host identification key
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.
Affected configurations
Node
sshtectia_serverMatch4.3.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| ssh:tectia_server | ssh tectia server | eq | 4.3.1 |
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2005-2146