CVE-2005-2146: Medium severity SSH Tectia Server vulnerability
Published Jul 5, 2005
·Updated
SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.
Affected Software
1 affected component
SSH Tectia Server=4.3.1
Remediation
Patch Available
Patch Available
Event History
Jul 5, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2146?
CVE-2005-2146 is categorized as a medium severity vulnerability.
2
How do I fix CVE-2005-2146?
To fix CVE-2005-2146, ensure that the permissions for the SSH host identification key are set securely to restrict access.
3
What impact does CVE-2005-2146 have on SSH servers?
CVE-2005-2146 allows local users to access the host identification key, which can lead to server spoofing.
4
Which versions of SSH Tectia Server are affected by CVE-2005-2146?
CVE-2005-2146 affects SSH Tectia Server version 4.3.1 and earlier.
5
Is SSH Secure Shell for Windows Servers vulnerable to CVE-2005-2146?
Yes, SSH Secure Shell for Windows Servers is also vulnerable to CVE-2005-2146.