Lucene search

[email protected]NVD:CVE-2008-5161

HistoryNov 19, 2008 - 5:30 p.m.

CVE-2008-5161

2008-11-1917:30:00

CWE-200

[email protected]

web.nvd.nist.gov

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

High

0.123 Low

EPSS

Percentile

95.4%

JSON

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Affected configurations

NVD

Node

openbsdopensshMatch4.7p1

sshtectia_clientMatch4.0

sshtectia_clientMatch4.0.1

sshtectia_clientMatch4.0.3

sshtectia_clientMatch4.0.4

sshtectia_clientMatch4.0.5

sshtectia_clientMatch4.2

sshtectia_clientMatch4.2.1

sshtectia_clientMatch4.3

sshtectia_clientMatch4.3.1

sshtectia_clientMatch4.3.1j

sshtectia_clientMatch4.3.2

sshtectia_clientMatch4.3.2j

sshtectia_clientMatch4.3.3

sshtectia_clientMatch4.3.4

sshtectia_clientMatch4.3.5

sshtectia_clientMatch4.3.6

sshtectia_clientMatch4.3.7

sshtectia_clientMatch4.3.8k

sshtectia_clientMatch4.3.9k

sshtectia_clientMatch4.4

sshtectia_clientMatch4.4.1

sshtectia_clientMatch4.4.2

sshtectia_clientMatch4.4.3

sshtectia_clientMatch4.4.4

sshtectia_clientMatch4.4.6

sshtectia_clientMatch4.4.7

sshtectia_clientMatch4.4.8

sshtectia_clientMatch4.4.9

sshtectia_clientMatch4.4.10

sshtectia_clientMatch4.4.11

sshtectia_clientMatch5.0.0

sshtectia_clientMatch5.0.0f

sshtectia_clientMatch5.0.1

sshtectia_clientMatch5.0.1f

sshtectia_clientMatch5.0.2

sshtectia_clientMatch5.0.2f

sshtectia_clientMatch5.0.3

sshtectia_clientMatch5.0.3f

sshtectia_clientMatch5.1.0

sshtectia_clientMatch5.1.1

sshtectia_clientMatch5.1.2

sshtectia_clientMatch5.1.3

sshtectia_clientMatch5.2.0

sshtectia_clientMatch5.2.1

sshtectia_clientMatch5.2.2

sshtectia_clientMatch5.2.3

sshtectia_clientMatch5.2.4

sshtectia_clientMatch5.3.0

sshtectia_clientMatch5.3.1

sshtectia_clientMatch5.3.2

sshtectia_clientMatch5.3.3

sshtectia_clientMatch5.3.5

sshtectia_clientMatch5.3.6

sshtectia_clientMatch5.3.7

sshtectia_clientMatch5.3.8

sshtectia_clientMatch6.0.0

sshtectia_clientMatch6.0.1

sshtectia_clientMatch6.0.2

sshtectia_clientMatch6.0.3

sshtectia_clientMatch6.0.4

sshtectia_connectorMatch4.0.7

sshtectia_connectorMatch4.1.2

sshtectia_connectorMatch4.1.3

sshtectia_connectorMatch4.1.5

sshtectia_connectorMatch4.2.0

sshtectia_connectorMatch4.3.0

sshtectia_connectorMatch4.3.4

sshtectia_connectorMatch4.3.5

sshtectia_connectorMatch4.4.0

sshtectia_connectorMatch4.4.2

sshtectia_connectorMatch4.4.4

sshtectia_connectorMatch4.4.6

sshtectia_connectorMatch4.4.7

sshtectia_connectorMatch4.4.9

sshtectia_connectorMatch4.4.10

sshtectia_connectorMatch5.0.0

sshtectia_connectorMatch5.0.1

sshtectia_connectorMatch5.0.2

sshtectia_connectorMatch5.0.3

sshtectia_connectorMatch5.1.0

sshtectia_connectorMatch5.1.1

sshtectia_connectorMatch5.1.2

sshtectia_connectorMatch5.1.3

sshtectia_connectorMatch5.2.2

sshtectia_connectorMatch5.3.0

sshtectia_connectorMatch5.3.1

sshtectia_connectorMatch5.3.2

sshtectia_connectorMatch5.3.3

sshtectia_connectorMatch5.3.7

sshtectia_connectorMatch5.3.8

sshtectia_connectsecureMatch6.0.0

sshtectia_connectsecureMatch6.0.1

sshtectia_connectsecureMatch6.0.2

sshtectia_connectsecureMatch6.0.3

sshtectia_connectsecureMatch6.0.4

sshtectia_serverMatch4.0

sshtectia_serverMatch4.0.3

sshtectia_serverMatch4.0.4

sshtectia_serverMatch4.0.5

sshtectia_serverMatch4.0.7

sshtectia_serverMatch4.1.2

sshtectia_serverMatch4.1.3

sshtectia_serverMatch4.1.5

sshtectia_serverMatch4.2.0

sshtectia_serverMatch4.2.1

sshtectia_serverMatch4.2.2

sshtectia_serverMatch4.3

sshtectia_serverMatch4.3.0

sshtectia_serverMatch4.3.1

sshtectia_serverMatch4.3.2

sshtectia_serverMatch4.3.3

sshtectia_serverMatch4.3.4

sshtectia_serverMatch4.3.5

sshtectia_serverMatch4.3.6

sshtectia_serverMatch4.3.7

sshtectia_serverMatch4.4

sshtectia_serverMatch4.4.0

sshtectia_serverMatch4.4.1

sshtectia_serverMatch4.4.2

sshtectia_serverMatch4.4.4

sshtectia_serverMatch4.4.5

sshtectia_serverMatch4.4.6

sshtectia_serverMatch4.4.7

sshtectia_serverMatch4.4.8

sshtectia_serverMatch4.4.9

sshtectia_serverMatch4.4.10

sshtectia_serverMatch4.4.11

sshtectia_serverMatch5.0.0

sshtectia_serverMatch5.0.1

sshtectia_serverMatch5.0.2

sshtectia_serverMatch5.0.3

sshtectia_serverMatch5.1.0

sshtectia_serverMatch5.1.1

sshtectia_serverMatch5.1.1ibm_zos

sshtectia_serverMatch5.1.2

sshtectia_serverMatch5.1.3

sshtectia_serverMatch5.2.0

sshtectia_serverMatch5.2.0ibm_zos

sshtectia_serverMatch5.2.1ibm_zos

sshtectia_serverMatch5.2.2

sshtectia_serverMatch5.2.2ibm_zos

sshtectia_serverMatch5.2.3

sshtectia_serverMatch5.2.4

sshtectia_serverMatch5.3.0

sshtectia_serverMatch5.3.0ibm_zos

sshtectia_serverMatch5.3.1

sshtectia_serverMatch5.3.2

sshtectia_serverMatch5.3.3

sshtectia_serverMatch5.3.4

sshtectia_serverMatch5.3.5

sshtectia_serverMatch5.3.6

sshtectia_serverMatch5.3.7

sshtectia_serverMatch5.3.8

sshtectia_serverMatch5.4.0ibm_zos

sshtectia_serverMatch5.4.1ibm_zos

sshtectia_serverMatch5.4.2ibm_zos

sshtectia_serverMatch5.5.0ibm_zos

sshtectia_serverMatch5.5.1ibm_zos

sshtectia_serverMatch6.0.0

sshtectia_serverMatch6.0.0ibm_zos

sshtectia_serverMatch6.0.1

sshtectia_serverMatch6.0.1ibm_zos

sshtectia_serverMatch6.0.2

sshtectia_serverMatch6.0.3

sshtectia_serverMatch6.0.4

sshtectia_serverMatch6.0.4linux_ibm_zos

References

isc.sans.org/diary.html?storyid=5366

kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

lists.apple.com/archives/security-announce/2009/Nov/msg00000.html

marc.info/?l=bugtraq&m=125017764422557&w=2

openssh.org/txt/cbc.adv

osvdb.org/49872

osvdb.org/50035

osvdb.org/50036

rhn.redhat.com/errata/RHSA-2009-1287.html

secunia.com/advisories/32740

secunia.com/advisories/32760

secunia.com/advisories/32833

secunia.com/advisories/33121

secunia.com/advisories/33308

secunia.com/advisories/34857

secunia.com/advisories/36558

sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1

support.apple.com/kb/HT3937

support.attachmate.com/techdocs/2398.html

support.avaya.com/elmodocs2/security/ASA-2008-503.htm

www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt

www.kb.cert.org/vuls/id/958563

www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html

www.securityfocus.com/archive/1/498558/100/0/threaded

www.securityfocus.com/archive/1/498579/100/0/threaded

www.securityfocus.com/bid/32319

www.securitytracker.com/id?1021235

www.securitytracker.com/id?1021236

www.securitytracker.com/id?1021382

www.ssh.com/company/news/article/953/

www.vupen.com/english/advisories/2008/3172

www.vupen.com/english/advisories/2008/3173

www.vupen.com/english/advisories/2008/3409

www.vupen.com/english/advisories/2009/1135

www.vupen.com/english/advisories/2009/3184

exchange.xforce.ibmcloud.com/vulnerabilities/46620

h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667

kc.mcafee.com/corporate/index?page=content&id=SB10106

kc.mcafee.com/corporate/index?page=content&id=SB10163

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6 Medium

AI Score

Confidence

High

0.123 Low

EPSS

Percentile

95.4%

JSON

Related for NVD:CVE-2008-5161

ibm7 openvas13 checkpoint_security1 veracode1 nessus18 metasploit1 f52 ubuntucve1 oraclelinux1 cve1 prion1 cvelist1 redhat1 centos1 debiancve1 securityvulns1 gentoo1