CVE-2008-5161 Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4...
LowCVSS 2.6
EPSS 18.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | = 4.7p1 | No fix listed |
| ssh tectia client | = 4.0 | No fix listed |
| ssh tectia client | = 4.0.1 | No fix listed |
| ssh tectia client | = 4.0.3 | No fix listed |
| ssh tectia client | = 4.0.4 | No fix listed |
| ssh tectia client | = 4.0.5 | No fix listed |
| ssh tectia client | = 4.2 | No fix listed |
| ssh tectia client | = 4.2.1 | No fix listed |
| ssh tectia client | = 4.3 | No fix listed |
| ssh tectia client | = 4.3.1 | No fix listed |
| ssh tectia client | = 4.3.1j | No fix listed |
| ssh tectia client | = 4.3.2 | No fix listed |
| ssh tectia client | = 4.3.2j | No fix listed |
| ssh tectia client | = 4.3.3 | No fix listed |
| ssh tectia client | = 4.3.4 | No fix listed |
| ssh tectia client | = 4.3.5 | No fix listed |
| ssh tectia client | = 4.3.6 | No fix listed |
| ssh tectia client | = 4.3.7 | No fix listed |
| ssh tectia client | = 4.3.8k | No fix listed |
| ssh tectia client | = 4.3.9k | No fix listed |
| ssh tectia client | = 4.4 | No fix listed |
| ssh tectia client | = 4.4.1 | No fix listed |
| ssh tectia client | = 4.4.2 | No fix listed |
| ssh tectia client | = 4.4.3 | No fix listed |
| ssh tectia client | = 4.4.4 | No fix listed |
Show 138 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh tectia client | = 4.4.6 | No fix listed |
| ssh tectia client | = 4.4.7 | No fix listed |
| ssh tectia client | = 4.4.8 | No fix listed |
| ssh tectia client | = 4.4.9 | No fix listed |
| ssh tectia client | = 4.4.10 | No fix listed |
| ssh tectia client | = 4.4.11 | No fix listed |
| ssh tectia client | = 5.0.0 | No fix listed |
| ssh tectia client | = 5.0.0f | No fix listed |
| ssh tectia client | = 5.0.1 | No fix listed |
| ssh tectia client | = 5.0.1f | No fix listed |
| ssh tectia client | = 5.0.2 | No fix listed |
| ssh tectia client | = 5.0.2f | No fix listed |
| ssh tectia client | = 5.0.3 | No fix listed |
| ssh tectia client | = 5.0.3f | No fix listed |
| ssh tectia client | = 5.1.0 | No fix listed |
| ssh tectia client | = 5.1.1 | No fix listed |
| ssh tectia client | = 5.1.2 | No fix listed |
| ssh tectia client | = 5.1.3 | No fix listed |
| ssh tectia client | = 5.2.0 | No fix listed |
| ssh tectia client | = 5.2.1 | No fix listed |
| ssh tectia client | = 5.2.2 | No fix listed |
| ssh tectia client | = 5.2.3 | No fix listed |
| ssh tectia client | = 5.2.4 | No fix listed |
| ssh tectia client | = 5.3.0 | No fix listed |
| ssh tectia client | = 5.3.1 | No fix listed |
| ssh tectia client | = 5.3.2 | No fix listed |
| ssh tectia client | = 5.3.3 | No fix listed |
| ssh tectia client | = 5.3.5 | No fix listed |
| ssh tectia client | = 5.3.6 | No fix listed |
| ssh tectia client | = 5.3.7 | No fix listed |
| ssh tectia client | = 5.3.8 | No fix listed |
| ssh tectia client | = 6.0.0 | No fix listed |
| ssh tectia client | = 6.0.1 | No fix listed |
| ssh tectia client | = 6.0.2 | No fix listed |
| ssh tectia client | = 6.0.3 | No fix listed |
| ssh tectia client | = 6.0.4 | No fix listed |
| ssh tectia connector | = 4.0.7 | No fix listed |
| ssh tectia connector | = 4.1.2 | No fix listed |
| ssh tectia connector | = 4.1.3 | No fix listed |
| ssh tectia connector | = 4.1.5 | No fix listed |
| ssh tectia connector | = 4.2.0 | No fix listed |
| ssh tectia connector | = 4.3.0 | No fix listed |
| ssh tectia connector | = 4.3.4 | No fix listed |
| ssh tectia connector | = 4.3.5 | No fix listed |
| ssh tectia connector | = 4.4.0 | No fix listed |
| ssh tectia connector | = 4.4.2 | No fix listed |
| ssh tectia connector | = 4.4.4 | No fix listed |
| ssh tectia connector | = 4.4.6 | No fix listed |
| ssh tectia connector | = 4.4.7 | No fix listed |
| ssh tectia connector | = 4.4.9 | No fix listed |
| ssh tectia connector | = 4.4.10 | No fix listed |
| ssh tectia connector | = 5.0.0 | No fix listed |
| ssh tectia connector | = 5.0.1 | No fix listed |
| ssh tectia connector | = 5.0.2 | No fix listed |
| ssh tectia connector | = 5.0.3 | No fix listed |
| ssh tectia connector | = 5.1.0 | No fix listed |
| ssh tectia connector | = 5.1.1 | No fix listed |
| ssh tectia connector | = 5.1.2 | No fix listed |
| ssh tectia connector | = 5.1.3 | No fix listed |
| ssh tectia connector | = 5.2.2 | No fix listed |
| ssh tectia connector | = 5.3.0 | No fix listed |
| ssh tectia connector | = 5.3.1 | No fix listed |
| ssh tectia connector | = 5.3.2 | No fix listed |
| ssh tectia connector | = 5.3.3 | No fix listed |
| ssh tectia connector | = 5.3.7 | No fix listed |
| ssh tectia connector | = 5.3.8 | No fix listed |
| ssh tectia connectsecure | = 6.0.0 | No fix listed |
| ssh tectia connectsecure | = 6.0.1 | No fix listed |
| ssh tectia connectsecure | = 6.0.2 | No fix listed |
| ssh tectia connectsecure | = 6.0.3 | No fix listed |
| ssh tectia connectsecure | = 6.0.4 | No fix listed |
| ssh tectia server | = 4.0 | No fix listed |
| ssh tectia server | = 4.0.3 | No fix listed |
| ssh tectia server | = 4.0.4 | No fix listed |
| ssh tectia server | = 4.0.5 | No fix listed |
| ssh tectia server | = 4.0.7 | No fix listed |
| ssh tectia server | = 4.1.2 | No fix listed |
| ssh tectia server | = 4.1.3 | No fix listed |
| ssh tectia server | = 4.1.5 | No fix listed |
| ssh tectia server | = 4.2.0 | No fix listed |
| ssh tectia server | = 4.2.1 | No fix listed |
| ssh tectia server | = 4.2.2 | No fix listed |
| ssh tectia server | = 4.3 | No fix listed |
| ssh tectia server | = 4.3.0 | No fix listed |
| ssh tectia server | = 4.3.1 | No fix listed |
| ssh tectia server | = 4.3.2 | No fix listed |
| ssh tectia server | = 4.3.3 | No fix listed |
| ssh tectia server | = 4.3.4 | No fix listed |
| ssh tectia server | = 4.3.5 | No fix listed |
| ssh tectia server | = 4.3.6 | No fix listed |
| ssh tectia server | = 4.3.7 | No fix listed |
| ssh tectia server | = 4.4 | No fix listed |
| ssh tectia server | = 4.4.0 | No fix listed |
| ssh tectia server | = 4.4.1 | No fix listed |
| ssh tectia server | = 4.4.2 | No fix listed |
| ssh tectia server | = 4.4.4 | No fix listed |
| ssh tectia server | = 4.4.5 | No fix listed |
| ssh tectia server | = 4.4.6 | No fix listed |
| ssh tectia server | = 4.4.7 | No fix listed |
| ssh tectia server | = 4.4.8 | No fix listed |
| ssh tectia server | = 4.4.9 | No fix listed |
| ssh tectia server | = 4.4.10 | No fix listed |
| ssh tectia server | = 4.4.11 | No fix listed |
| ssh tectia server | = 5.0.0 | No fix listed |
| ssh tectia server | = 5.0.1 | No fix listed |
| ssh tectia server | = 5.0.2 | No fix listed |
| ssh tectia server | = 5.0.3 | No fix listed |
| ssh tectia server | = 5.1.0 | No fix listed |
| ssh tectia server | = 5.1.1 | No fix listed |
| ssh tectia server | = 5.1.2 | No fix listed |
| ssh tectia server | = 5.1.3 | No fix listed |
| ssh tectia server | = 5.2.0 | No fix listed |
| ssh tectia server | = 5.2.1 | No fix listed |
| ssh tectia server | = 5.2.2 | No fix listed |
| ssh tectia server | = 5.2.3 | No fix listed |
| ssh tectia server | = 5.2.4 | No fix listed |
| ssh tectia server | = 5.3.0 | No fix listed |
| ssh tectia server | = 5.3.1 | No fix listed |
| ssh tectia server | = 5.3.2 | No fix listed |
| ssh tectia server | = 5.3.3 | No fix listed |
| ssh tectia server | = 5.3.4 | No fix listed |
| ssh tectia server | = 5.3.5 | No fix listed |
| ssh tectia server | = 5.3.6 | No fix listed |
| ssh tectia server | = 5.3.7 | No fix listed |
| ssh tectia server | = 5.3.8 | No fix listed |
| ssh tectia server | = 5.4.0 | No fix listed |
| ssh tectia server | = 5.4.1 | No fix listed |
| ssh tectia server | = 5.4.2 | No fix listed |
| ssh tectia server | = 5.5.0 | No fix listed |
| ssh tectia server | = 5.5.1 | No fix listed |
| ssh tectia server | = 6.0.0 | No fix listed |
| ssh tectia server | = 6.0.1 | No fix listed |
| ssh tectia server | = 6.0.2 | No fix listed |
| ssh tectia server | = 6.0.3 | No fix listed |
| ssh tectia server | = 6.0.4 | No fix listed |
| debian/openssh(Debian:12) | < 1:5.1p1-5 | 1:5.1p1-5 |
| debian/openssh(Debian:13) | < 1:5.1p1-5 | 1:5.1p1-5 |
| debian/openssh(Debian:14) | < 1:5.1p1-5 | 1:5.1p1-5 |
References
- Debian Security Tracker CVE-2008-5161 vendor-advisory
- bugs.debian.org issue-tracking
- isc.sans.org
- kb.juniper.net
- APPLE-SA-2009-11-09-1 vendor-advisory
- HPSBMA02447 vendor-advisory
- openssh.org
- 49872 vdb-entry
- 50035 vdb-entry
- 50036 vdb-entry
- RHSA-2009:1287 vendor-advisory
- 32740 third-party-advisory vendor-advisory
- 32760 third-party-advisory vendor-advisory
- 32833 third-party-advisory
- 33121 third-party-advisory
- 33308 third-party-advisory
- 34857 third-party-advisory
- 36558 third-party-advisory
- 247186 vendor-advisory
- support.apple.com
- support.attachmate.com
- support.avaya.com
- www.cpni.gov.uk
- VU#958563 third-party-advisory us-government-resource
- www.rtpro.yamaha.co.jp
- 20081121 OpenSSH security advisory: cbc.adv mailing-list
- 20081123 Revised: OpenSSH security advisory: cbc.adv mailing-list
- 32319 vdb-entry
- 1021235 vdb-entry
- 1021236 vdb-entry
- 1021382 vdb-entry
- www.ssh.com vendor-advisory
- ADV-2008-3172 vdb-entry
- ADV-2008-3173 vdb-entry
- ADV-2008-3409 vdb-entry
- ADV-2009-1135 vdb-entry
- ADV-2009-3184 vdb-entry
- openssh-sshtectia-cbc-info-disclosure(46620) vdb-entry
- h20566.www2.hpe.com
- kc.mcafee.com
- kc.mcafee.com
- oval:org.mitre.oval:def:11279 signature vdb-entry