CVE-2005-2666

Impact:
Low
Public Date:
2005-07-07
Bugzilla:
162681: CVE-2005-2666 openssh vulnerable to known_hosts address harvesting

The MITRE CVE dictionary describes this issue as:

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.

Find out more about CVE-2005-2666 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

Red Hat is aware of this issue and is tracking it via the following bug:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162681

The Red Hat Security Response Team has rated this issue as having low security impact, a future update may address this flaw. More information regarding issue severity can be found here:
http://www.redhat.com/security/updates/classification/

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 4 (openssh) RHSA-2007:0257 2007-05-01

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.