Lucene search
MitreCVELIST:CVE-2010-4478HistoryDec 06, 2010 - 10:00 p.m.
CVE-2010-4478
2010-12-0622:00:00
mitre
www.cve.org
3
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.
References
kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/jpake.c#rev1.5
www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/jpake.c.diff?r1=1.4%3Br2=1.5%3Bf=h
bugzilla.redhat.com/show_bug.cgi?id=659297
github.com/seb-m/jpake
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12338
Related
cve
cve
CVE-2010-4478
2010-12-06 22:30:31
CVE-2010-4252
2010-12-06 21:05:49
debiancve
debiancve
CVE-2010-4478
2010-12-06 22:30:31
CVE-2010-4252
2010-12-06 21:05:49
nvd
nvd
CVE-2010-4478
2010-12-06 22:30:31
CVE-2010-4252
2010-12-06 21:05:49
prion
prion
Design/Logic Flaw
2010-12-06 22:30:00
Design/Logic Flaw
2010-12-06 21:05:00
attackerkb
attackerkb
CVE-2010-4478
2010-12-06 00:00:00
ubuntucve
ubuntucve
CVE-2010-4478
2010-12-06 00:00:00
CVE-2010-4252
2010-12-06 00:00:00
f5
f5
OpenSSH J-PAKE vulnerability CVE-2010-4478
2013-03-28 07:51:00
SOL14317 - OpenSSH J-PAKE vulnerability CVE-2010-4478
2013-03-27 00:00:00
K17382 : OpenSSL vulnerability CVE-2010-4252
2015-10-09 00:00:00
openvas
openvas
OpenSSH <= 5.6 Improper Authentication Vulnerability
2021-05-27 00:00:00
OpenSSL: JPAKE validation error (20101202) - Windows
2021-08-16 00:00:00
OpenSSL: JPAKE validation error (20101202) - Linux
2021-08-16 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2010-4252
2010-12-02 00:00:00
nessus
nessus
F5 Networks BIG-IP : OpenSSL vulnerability (K17382)
2015-10-12 00:00:00
OpenSSH < 5.7 Multiple Vulnerabilities
2012-02-01 00:00:00
OpenSSH < 5.7 Multiple Vulnerabilities
2011-10-04 00:00:00
cvelist
cvelist
CVE-2010-4252
2010-12-06 21:00:00
slackware
slackware
[slackware-security] openssl
2010-12-07 07:14:58
securityvulns
securityvulns
OpenSSL protection level downgrade
2010-12-09 00:00:00
gentoo
gentoo
OpenSSH: Multiple vulnerabilities
2014-05-11 00:00:00
OpenSSL: Multiple vulnerabilities
2011-10-09 00:00:00
ibm
ibm
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
lenovo
lenovo
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
2018-11-13 17:10:51
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
2018-11-13 17:10:51