Skip to content

CVE-2005-2146 SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access th...

MediumCVSS 4.6 EPSS 0.31%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.

Affected products

ProductAffected versionsFixed in
ssh tectia server = 4.3.1 No fix listed

References

  • 15894 patch third-party-advisory vendor-advisory
  • www.ssh.com patch vendor-advisory