PT-2005-3554 · Openssh+2 · Openssh+2

Cynthia Mclain + 4 · Publicado 2005-08-23 · Atualizado 2024-07-08 · CVE-2005-2666

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 4.0

Description The issue allows an attacker that has compromised an SSH user's account to more easily generate a list of additional targets that are more likely to have the same password or key. This is because hostnames, IP addresses, and keys are stored in plaintext in the known hosts file.

Recommendations For OpenSSH versions prior to 4.0, update to version 4.0 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

ALT-PU-2024-3921

ALT-PU-2024-4077

ALT-PU-2024-4467

ALT-PU-2024-9513

CVE-2005-2666

RHSA-2007:0257

RHSA-2007_0257

Produtos afetados

Alt Linux

Openssh

Red Hat

Referências · 362

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_version.rb · Exploit
• 🔥 https://github.com/Rhynorater/CVE-2018-15473-Exploit · Exploit
• 🔥 https://github.com/zgzhang/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/xaitax/CVE-2024-6387_Check · Exploit
• 🔥 https://github.com/acrono/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/asterictnl-lvdw/CVE-2024-6387 · Exploit
• 🔥 https://github.com/cpandya2909/CVE-2020-15778 · Exploit
• 🔥 https://github.com/lflare/cve-2024-6387-poc · Exploit
• 🔥 https://github.com/epi052/cve-2018-15473 · Exploit
• 🔥 https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2016-6210 · Exploit
• 🔥 https://github.com/Christbowel/CVE-2023-25136 · Exploit
• 🔥 https://github.com/l0n3m4n/CVE-2024-6387 · Exploit
• 🔥 https://github.com/filipi86/CVE-2024-6387-Vulnerability-Checker · Exploit
• 🔥 https://github.com/vin01/poc-proxycommand-vulnerable · Exploit