Unscored severity · published Jul 5, 2005
CVE-2005-2146
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows…
–
CVSS
0.3%
EPSS
No
On KEV
Description
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tectia Server · Ssh
4.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2146
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2146
Patch
http://secunia.com/advisories/15894
Patch
http://www.ssh.com/company/newsroom/article/653/
More from Tectia Server
8.8
CVE-2021-27891
SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation
7.8
CVE-2021-27892
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation
7.0
CVE-2021-27893
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions
3.7
CVE-2008-5161
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and…
–
CVE-2012-5975
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when…