Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-2666

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.

Published

2005-08-23T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 1.2 (LOW)

CVSSv2 Vector

AV:L/AC:H/Au:N/C:P/I:N/A:N

  • Access Vector: LOCAL
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

1.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-255
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openbsd openssh 3.0 Yes
Application openbsd openssh 3.0.1 Yes
Application openbsd openssh 3.0.1p1 Yes
Application openbsd openssh 3.0.2 Yes
Application openbsd openssh 3.0.2p1 Yes
Application openbsd openssh 3.0p1 Yes
Application openbsd openssh 3.1 Yes
Application openbsd openssh 3.1p1 Yes
Application openbsd openssh 3.2 Yes
Application openbsd openssh 3.2.2p1 Yes
Application openbsd openssh 3.2.3p1 Yes
Application openbsd openssh 3.3 Yes
Application openbsd openssh 3.3p1 Yes
Application openbsd openssh 3.4 Yes
Application openbsd openssh 3.4p1 Yes
Application openbsd openssh 3.5 Yes
Application openbsd openssh 3.5p1 Yes
Application openbsd openssh 3.6 Yes
Application openbsd openssh 3.6.1 Yes
Application openbsd openssh 3.6.1p1 Yes
Application openbsd openssh 3.6.1p2 Yes
Application openbsd openssh 3.7 Yes
Application openbsd openssh 3.7.1 Yes
Application openbsd openssh 3.7.1p2 Yes
Application openbsd openssh 3.8 Yes
Application openbsd openssh 3.8.1 Yes
Application openbsd openssh 3.8.1p1 Yes
Application openbsd openssh 3.9 Yes
Application openbsd openssh 3.9.1 Yes
Application openbsd openssh 3.9.1p1 Yes
References