CVE-2005-4310: SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials | LiveThreat CVE Feed — Verisq

Login Request a demo

Unscored severity · published Dec 17, 2005

CVE-2005-4310

SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials

–

CVSS

1.4%

EPSS

No

On KEV

Description

SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials.

Exploitation

Is it being used?

Exploit prediction (EPSS)1.4% · higher than 72% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

TS

Tectia Server · Ssh

5.0.0_a; 5.0.0_f; 5.0.0_t · source: NVD

Affected product

TS

Tectia Server

Ssh

All Tectia Server CVEs

References

https://nvd.nist.gov/vuln/detail/CVE-2005-4310

https://www.cve.org/CVERecord?id=CVE-2005-4310

http://secunia.com/advisories/18001

securitytracker.com

http://securitytracker.com/id?1015368

http://www.securityfocus.com/bid/15903

http://www.ssh.com/company/newsroom/article/694/

http://www.vupen.com/english/advisories/2005/2929

More from Tectia Server

8.8

SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation

7.8

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation

7.0

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions

3.7

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and…

–

The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when…