First published: Wed Nov 19 2008(Updated: )
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SSH Tectia Server | =5.0.3 | |
SSH Tectia Connector | =4.4.2 | |
SSH Tectia Client | =5.0.3f | |
SSH Tectia Server | =4.4.6 | |
SSH Tectia Client | =5.0.2 | |
SSH Tectia Server | =5.2.0 | |
SSH Tectia Connector | =4.3.0 | |
SSH Tectia Server | =4.3 | |
SSH Tectia Client | =5.2.3 | |
SSH Tectia Server | =5.3.0 | |
SSH Tectia Client | =4.0.3 | |
SSH Tectia Client | =4.3.4 | |
SSH Tectia Server | =5.1.3 | |
SSH Tectia Server | =5.3.4 | |
SSH Tectia Server | =5.3.5 | |
SSH Tectia Client | =5.0.0f | |
SSH Tectia Client | =4.4.6 | |
SSH Tectia Connector | =4.2.0 | |
SSH Tectia Connector | =4.3.5 | |
SSH Tectia Server | =5.1.1 | |
SSH Tectia Server | =4.2.1 | |
SSH Tectia Connector | =5.0.1 | |
SSH Tectia Server | =4.2.0 | |
SSH Tectia Server | =4.0.7 | |
SSH Tectia Connector | =4.1.3 | |
SSH Tectia Server | =5.3.8 | |
SSH Tectia Client | =4.3.6 | |
SSH Tectia Client | =5.0.1f | |
SSH Tectia Client | =4.4.1 | |
SSH Tectia Client | =5.0.2f | |
SSH Tectia Client | =6.0.2 | |
SSH Tectia Client | =4.3.1j | |
SSH Tectia Server | =5.4.0 | |
SSH Tectia Server | =5.5.1 | |
SSH Tectia Server | =6.0.0 | |
SSH Tectia Connector | =5.1.0 | |
SSH Tectia Server | =5.0.2 | |
SSH Tectia Connector | =5.3.1 | |
SSH Tectia Client | =6.0.4 | |
SSH Tectia Server | =5.3.2 | |
SSH Tectia Server | =4.4.7 | |
SSH Tectia ConnectSecure | =6.0.4 | |
SSH Tectia Client | =5.3.2 | |
SSH Tectia Client | =4.3.1 | |
SSH Tectia Server | =5.2.2 | |
SSH Tectia Server | =4.3.0 | |
SSH Tectia Server | =4.4.0 | |
SSH Tectia Server | =6.0.4 | |
SSH Tectia Client | =5.2.1 | |
SSH Tectia Connector | =4.4.9 | |
SSH Tectia Client | =4.3.5 | |
SSH Tectia Server | =4.4.1 | |
SSH Tectia Client | =5.1.2 | |
SSH Tectia Server | =6.0.1 | |
SSH Tectia Server | =5.2.1 | |
SSH Tectia Server | =5.0.0 | |
SSH Tectia Client | =4.4.4 | |
SSH Tectia Server | =4.3.7 | |
SSH Tectia Server | =5.2.3 | |
SSH Tectia Connector | =5.1.2 | |
SSH Tectia Server | =4.4.4 | |
SSH Tectia Server | =4.0 | |
SSH Tectia ConnectSecure | =6.0.2 | |
SSH Tectia Connector | =4.4.10 | |
SSH Tectia Client | =4.0.4 | |
SSH Tectia Connector | =5.3.0 | |
SSH Tectia Connector | =5.1.1 | |
SSH Tectia Connector | =5.0.3 | |
SSH Tectia Client | =4.4.11 | |
SSH Tectia Connector | =4.1.2 | |
SSH Tectia Client | =5.1.3 | |
SSH Tectia Client | =5.3.3 | |
SSH Tectia Client | =4.4 | |
SSH Tectia Client | =5.0.3 | |
SSH Tectia Client | =5.2.2 | |
SSH Tectia Server | =4.4.5 | |
SSH Tectia Client | =4.3.2j | |
SSH Tectia Server | =4.3.6 | |
SSH Tectia Client | =4.3.8k | |
SSH Tectia Server | =4.3.3 | |
SSH Tectia Connector | =4.0.7 | |
SSH Tectia Client | =5.3.5 | |
SSH Tectia Client | =4.3.2 | |
SSH Tectia Connector | =4.4.0 | |
SSH Tectia Connector | =5.3.2 | |
SSH Tectia Client | =5.3.8 | |
SSH Tectia Connector | =4.3.4 | |
SSH Tectia Client | =5.1.0 | |
SSH Tectia Client | =5.2.0 | |
SSH Tectia Client | =4.3.9k | |
SSH Tectia Server | =4.3.2 | |
SSH Tectia Server | =4.0.4 | |
OpenSSH | =4.7p1 | |
SSH Tectia Connector | =5.3.3 | |
SSH Tectia Client | =4.4.7 | |
SSH Tectia Server | =5.4.1 | |
SSH Tectia Connector | =4.1.5 | |
SSH Tectia Server | =4.3.5 | |
SSH Tectia Server | =6.0.3 | |
SSH Tectia Server | =5.3.3 | |
SSH Tectia Server | =4.4.11 | |
SSH Tectia Client | =4.0.1 | |
SSH Tectia Server | =4.0.3 | |
SSH Tectia Client | =4.2.1 | |
SSH Tectia Server | =5.1.2 | |
SSH Tectia Connector | =4.4.4 | |
SSH Tectia Client | =4.2 | |
SSH Tectia Connector | =5.3.8 | |
SSH Tectia Server | =4.4.10 | |
SSH Tectia Server | =5.1.0 | |
SSH Tectia Connector | =5.3.7 | |
SSH Tectia Client | =5.0.0 | |
SSH Tectia ConnectSecure | =6.0.0 | |
SSH Tectia Connector | =4.4.7 | |
SSH Tectia Connector | =4.4.6 | |
SSH Tectia Client | =4.4.2 | |
SSH Tectia ConnectSecure | =6.0.3 | |
SSH Tectia Client | =4.4.10 | |
SSH Tectia Connector | =5.0.2 | |
SSH Tectia Server | =5.0.1 | |
SSH Tectia Client | =4.3.3 | |
SSH Tectia Server | =4.1.2 | |
SSH Tectia Client | =5.3.7 | |
SSH Tectia Server | =6.0.0 | |
SSH Tectia Server | =5.3.0 | |
SSH Tectia Server | =4.1.3 | |
SSH Tectia Server | =5.2.2 | |
SSH Tectia Client | =6.0.3 | |
SSH Tectia Client | =4.4.8 | |
SSH Tectia ConnectSecure | =6.0.1 | |
SSH Tectia Server | =5.3.6 | |
SSH Tectia Client | =4.4.3 | |
SSH Tectia Connector | =5.0.0 | |
SSH Tectia Client | =4.3 | |
SSH Tectia Server | =4.2.2 | |
SSH Tectia Server | =5.2.0 | |
SSH Tectia Connector | =5.1.3 | |
SSH Tectia Server | =5.1.1 | |
SSH Tectia Server | =4.3.4 | |
SSH Tectia Server | =4.4.8 | |
SSH Tectia Server | =4.3.1 | |
SSH Tectia Server | =4.0.5 | |
SSH Tectia Server | =5.3.7 | |
SSH Tectia Client | =6.0.1 | |
SSH Tectia Server | =5.5.0 | |
SSH Tectia Connector | =5.2.2 | |
SSH Tectia Client | =6.0.0 | |
SSH Tectia Client | =4.3.7 | |
SSH Tectia Client | =4.4.9 | |
SSH Tectia Server | =4.4.9 | |
SSH Tectia Server | =5.2.4 | |
SSH Tectia Server | =6.0.4 | |
SSH Tectia Client | =4.0 | |
SSH Tectia Client | =5.2.4 | |
SSH Tectia Client | =5.1.1 | |
SSH Tectia Client | =5.3.1 | |
SSH Tectia Server | =4.4.2 | |
SSH Tectia Client | =5.0.1 | |
SSH Tectia Client | =5.3.0 | |
SSH Tectia Server | =6.0.1 | |
SSH Tectia Server | =5.4.2 | |
SSH Tectia Server | =4.1.5 | |
SSH Tectia Server | =6.0.2 | |
SSH Tectia Client | =4.0.5 | |
SSH Tectia Server | =5.3.1 | |
SSH Tectia Client | =5.3.6 | |
SSH Tectia Server | =4.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-5161 is categorized as a high severity vulnerability affecting SSH Tectia Client and Server due to improper error handling.
To fix CVE-2008-5161, update your SSH Tectia Client and Server to the latest version available from SSH Communications Security.
CVE-2008-5161 affects various versions of SSH Tectia Client, Server, and Connector, specifically versions from 4.0 through 6.0.4.
Yes, CVE-2008-5161 can potentially allow unauthorized access due to the error handling flaw in the SSH protocol.
While the best option is to update, users should limit exposure by restricting access to vulnerable versions and monitoring for suspicious activity.