The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.

References

www.ubuntu.com/usn/usn-612-5

exchange.xforce.ibmcloud.com/vulnerabilities/42568

prion 3

cve 3

ubuntucve 2

debiancve 2

nvd 3

nessus 11

openvas 20

ubuntu 6

securityvulns 3

redhatcve 1

cvelist 2

debian 4

cert 1

osv 2

avleonov 1

prion

Authentication flaw

2008-05-18 14:20:00

Code injection

2008-05-13 17:20:00

Design/Logic Flaw

2021-05-21 20:15:00

cve

CVE-2008-2285

2008-05-18 14:20:00

CVE-2008-0166

2008-05-13 17:20:00

CVE-2008-3280

2021-05-21 20:15:07

ubuntucve

CVE-2008-2285

2008-05-18 00:00:00

CVE-2008-0166

2008-05-13 00:00:00

debiancve

CVE-2008-2285

2008-05-18 14:20:00

CVE-2008-0166

2008-05-13 17:20:00

nvd

CVE-2008-2285

2008-05-18 14:20:00

CVE-2008-0166

2008-05-13 17:20:00

CVE-2008-3280

2021-05-21 20:15:07

nessus

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)

2008-05-16 00:00:00

Ubuntu 6.06 LTS : openssh update (USN-612-7)

2008-05-22 00:00:00

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh vulnerability (USN-612-2)

2013-03-09 00:00:00

openvas

Debian: Security Advisory (DSA-1576-1)

2008-05-27 00:00:00

Debian: Security Advisory (DSA-1576-1)

2008-05-27 00:00:00

Ubuntu: Security Advisory (USN-612-5)

2009-03-23 00:00:00

ubuntu

OpenSSH update

2008-05-14 00:00:00

OpenSSH vulnerability

2008-05-13 00:00:00

OpenVPN vulnerability

2008-05-13 00:00:00

securityvulns

[USN-612-1] OpenSSL vulnerability

2008-05-14 00:00:00

Linux distributives OpenSSH / OpenSSL weak random generator

2008-05-15 00:00:00

[USN-612-2] OpenSSH vulnerability

2008-05-14 00:00:00

redhatcve

CVE-2008-0166

2015-10-30 10:12:49

cvelist

CVE-2008-0166

2008-05-13 17:00:00

CVE-2008-3280

2021-05-21 19:23:55

debian

[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

2008-05-16 16:14:27

[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

2008-05-16 16:14:27

[SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness

2008-05-14 09:24:56

cert

Debian and Ubuntu OpenSSL packages contain a predictable random number generator

2008-05-15 00:00:00

osv

openssh openssh-blacklist - predictable randomness

2008-05-14 00:00:00

openssl - predictable random number generator

2008-05-13 00:00:00

avleonov

Vulnerability Management at Tinkoff Fintech School

2019-03-04 10:38:31

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.3 Medium

AI Score

Confidence

High

0.082 Low

EPSS

Percentile

94.4%

JSON

Related for CVELIST:CVE-2008-2285