SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell h…

CVSS

4.6

Medium

EPSS

0.00

p22

Published

2005-01-01

Updated

2005-01-01

Description

SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.

Affected products

Tectia_server

CVSS vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Timeline

2005-01-01

Published

2005-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: L

Local (L)

Attack Complexity

AC: L

Low (L)

Authentication

Au: N

None (N)

Confidentiality Impact

C: P

Partial

Integrity Impact

I: P

Partial

Availability Impact

A: P

Partial

Exploit indicators

EPSS

0.003 · p22

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Ssh

Tectia Server

Product	Vendor	Status
tectia_server	*	Tracked

Source databases

CVE