Low severity · published Nov 19, 2008
CVE-2008-5161
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and…
3.7
CVSS
18.6%
EPSS
No
On KEV
Description
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)18.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openssh · Openbsd
4.7p1 · source: NVD
TC
Tectia Client · Ssh
4.0; 4.0.1; 4.0.3; 4.0.4; 4.0.5; 4.2; +34 more · source: NVD
TC
Tectia Connector · Ssh
4.0.7; 4.1.2; 4.1.3; 4.1.5; 4.2.0; 4.3.0; +24 more · source: NVD
TC
Tectia Connectsecure · Ssh
6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4 · source: NVD
TS
Tectia Server · Ssh
4.0; 4.0.3; 4.0.4; 4.0.5; 4.0.7; 4.1.2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5161
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5161
isc.sans.org
http://isc.sans.org/diary.html?storyid=5366
kb.juniper.net
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
marc.info
http://marc.info/?l=bugtraq&m=125017764422557&w=2
openssh.org
http://openssh.org/txt/cbc.adv
osvdb.org
http://osvdb.org/49872
More from Openssh
9.8
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…
9.8
CVE-2023-28531
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints
9.8
CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows…
9.8
CVE-2010-4478
OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for…
9.8
CVE-2002-0639
Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication)…