SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who…

CVSS

7.2

High

EPSS

0.01

p53

Published

2000-01-01

Updated

2000-01-01

Description

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Affected products

Ssh

CVSS vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Timeline

2000-01-01

Published

2000-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: L

Local (L)

Attack Complexity

AC: L

Low (L)

Authentication

Au: N

None (N)

Confidentiality Impact

C: C

Complete

Integrity Impact

I: C

Complete

Availability Impact

A: C

Complete

Exploit indicators

EPSS

0.008 · p53

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Ssh

Product	Vendor	Status
ssh	*	Tracked

Source databases

CVE