Lucene search

MitreCVE-2005-2189

HistoryJul 11, 2005 - 4:00 a.m.

CVE-2005-2189

2005-07-1104:00:00

mitre

web.nvd.nist.gov

lantronix

securelinx

console server

firmware

access control

ssh

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as SSH private keys.

Affected configurations

Nvd

Node

lantronixsecurelinxMatch2.0

lantronixsecurelinxMatch3.0

VendorProductVersionCPE
lantronixsecurelinx2.0cpe:2.3:h:lantronix:securelinx:2.0:*:*:*:*:*:*:*
lantronixsecurelinx3.0cpe:2.3:h:lantronix:securelinx:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lantronix	securelinx	2.0	cpe:2.3:h:lantronix:securelinx:2.0:::::::*
lantronix	securelinx	3.0	cpe:2.3:h:lantronix:securelinx:3.0:::::::*

References

marc.info/?l=bugtraq&m=112075990621765&w=2

secunia.com/advisories/15979

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

77.5%

JSON

Related for CVE-2005-2189