2.6

CVE-2008-5161

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
OpenbsdOpenssh Version4.7p1
SshTectia Client Version4.0
SshTectia Client Version4.0.1
SshTectia Client Version4.0.3
SshTectia Client Version4.0.4
SshTectia Client Version4.0.5
SshTectia Client Version4.2
SshTectia Client Version4.2.1
SshTectia Client Version4.3
SshTectia Client Version4.3.1
SshTectia Client Version4.3.1j
SshTectia Client Version4.3.2
SshTectia Client Version4.3.2j
SshTectia Client Version4.3.3
SshTectia Client Version4.3.4
SshTectia Client Version4.3.5
SshTectia Client Version4.3.6
SshTectia Client Version4.3.7
SshTectia Client Version4.3.8k
SshTectia Client Version4.3.9k
SshTectia Client Version4.4
SshTectia Client Version4.4.1
SshTectia Client Version4.4.2
SshTectia Client Version4.4.3
SshTectia Client Version4.4.4
SshTectia Client Version4.4.6
SshTectia Client Version4.4.7
SshTectia Client Version4.4.8
SshTectia Client Version4.4.9
SshTectia Client Version4.4.10
SshTectia Client Version4.4.11
SshTectia Client Version5.0.0
SshTectia Client Version5.0.0f
SshTectia Client Version5.0.1
SshTectia Client Version5.0.1f
SshTectia Client Version5.0.2
SshTectia Client Version5.0.2f
SshTectia Client Version5.0.3
SshTectia Client Version5.0.3f
SshTectia Client Version5.1.0
SshTectia Client Version5.1.1
SshTectia Client Version5.1.2
SshTectia Client Version5.1.3
SshTectia Client Version5.2.0
SshTectia Client Version5.2.1
SshTectia Client Version5.2.2
SshTectia Client Version5.2.3
SshTectia Client Version5.2.4
SshTectia Client Version5.3.0
SshTectia Client Version5.3.1
SshTectia Client Version5.3.2
SshTectia Client Version5.3.3
SshTectia Client Version5.3.5
SshTectia Client Version5.3.6
SshTectia Client Version5.3.7
SshTectia Client Version5.3.8
SshTectia Client Version6.0.0
SshTectia Client Version6.0.1
SshTectia Client Version6.0.2
SshTectia Client Version6.0.3
SshTectia Client Version6.0.4
SshTectia Connector Version4.0.7
SshTectia Connector Version4.1.2
SshTectia Connector Version4.1.3
SshTectia Connector Version4.1.5
SshTectia Connector Version4.2.0
SshTectia Connector Version4.3.0
SshTectia Connector Version4.3.4
SshTectia Connector Version4.3.5
SshTectia Connector Version4.4.0
SshTectia Connector Version4.4.2
SshTectia Connector Version4.4.4
SshTectia Connector Version4.4.6
SshTectia Connector Version4.4.7
SshTectia Connector Version4.4.9
SshTectia Connector Version4.4.10
SshTectia Connector Version5.0.0
SshTectia Connector Version5.0.1
SshTectia Connector Version5.0.2
SshTectia Connector Version5.0.3
SshTectia Connector Version5.1.0
SshTectia Connector Version5.1.1
SshTectia Connector Version5.1.2
SshTectia Connector Version5.1.3
SshTectia Connector Version5.2.2
SshTectia Connector Version5.3.0
SshTectia Connector Version5.3.1
SshTectia Connector Version5.3.2
SshTectia Connector Version5.3.3
SshTectia Connector Version5.3.7
SshTectia Connector Version5.3.8
SshTectia Connectsecure Version6.0.0
SshTectia Connectsecure Version6.0.1
SshTectia Connectsecure Version6.0.2
SshTectia Connectsecure Version6.0.3
SshTectia Connectsecure Version6.0.4
SshTectia Server Version4.0
SshTectia Server Version4.0.3
SshTectia Server Version4.0.4
SshTectia Server Version4.0.5
SshTectia Server Version4.0.7
SshTectia Server Version4.1.2
SshTectia Server Version4.1.3
SshTectia Server Version4.1.5
SshTectia Server Version4.2.0
SshTectia Server Version4.2.1
SshTectia Server Version4.2.2
SshTectia Server Version4.3
SshTectia Server Version4.3.0
SshTectia Server Version4.3.1
SshTectia Server Version4.3.2
SshTectia Server Version4.3.3
SshTectia Server Version4.3.4
SshTectia Server Version4.3.5
SshTectia Server Version4.3.6
SshTectia Server Version4.3.7
SshTectia Server Version4.4
SshTectia Server Version4.4.0
SshTectia Server Version4.4.1
SshTectia Server Version4.4.2
SshTectia Server Version4.4.4
SshTectia Server Version4.4.5
SshTectia Server Version4.4.6
SshTectia Server Version4.4.7
SshTectia Server Version4.4.8
SshTectia Server Version4.4.9
SshTectia Server Version4.4.10
SshTectia Server Version4.4.11
SshTectia Server Version5.0.0
SshTectia Server Version5.0.1
SshTectia Server Version5.0.2
SshTectia Server Version5.0.3
SshTectia Server Version5.1.0
SshTectia Server Version5.1.1
SshTectia Server Version5.1.1 Editionibm_zos
SshTectia Server Version5.1.2
SshTectia Server Version5.1.3
SshTectia Server Version5.2.0
SshTectia Server Version5.2.0 Editionibm_zos
SshTectia Server Version5.2.1 Editionibm_zos
SshTectia Server Version5.2.2
SshTectia Server Version5.2.2 Editionibm_zos
SshTectia Server Version5.2.3
SshTectia Server Version5.2.4
SshTectia Server Version5.3.0
SshTectia Server Version5.3.0 Editionibm_zos
SshTectia Server Version5.3.1
SshTectia Server Version5.3.2
SshTectia Server Version5.3.3
SshTectia Server Version5.3.4
SshTectia Server Version5.3.5
SshTectia Server Version5.3.6
SshTectia Server Version5.3.7
SshTectia Server Version5.3.8
SshTectia Server Version5.4.0 Editionibm_zos
SshTectia Server Version5.4.1 Editionibm_zos
SshTectia Server Version5.4.2 Editionibm_zos
SshTectia Server Version5.5.0 Editionibm_zos
SshTectia Server Version5.5.1 Editionibm_zos
SshTectia Server Version6.0.0
SshTectia Server Version6.0.0 Editionibm_zos
SshTectia Server Version6.0.1
SshTectia Server Version6.0.1 Editionibm_zos
SshTectia Server Version6.0.2
SshTectia Server Version6.0.3
SshTectia Server Version6.0.4
SshTectia Server Version6.0.4 Editionlinux_ibm_zos
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.47% 0.871
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.