Red Hat Security AdvisoryRHSA-2007:0257
openssh security and bug fix update
Released 2007-05-01 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 openssh-3.9p1-8.RHEL4.20, openssh-3.9p1-8.RHEL4.20.i386, openssh-3.9p1-8.RHEL4.20.ia64 +17
- Red Hat Enterprise Linux Desktop version 4 openssh-3.9p1-8.RHEL4.20, openssh-3.9p1-8.RHEL4.20.i386, openssh-askpass-3.9p1-8.RHEL4.20 +7
- Red Hat Enterprise Linux ES version 4 openssh-3.9p1-8.RHEL4.20, openssh-3.9p1-8.RHEL4.20.i386, openssh-3.9p1-8.RHEL4.20.ia64 +12
- Red Hat Enterprise Linux WS version 4 openssh-3.9p1-8.RHEL4.20, openssh-3.9p1-8.RHEL4.20.i386, openssh-3.9p1-8.RHEL4.20.ia64 +12
Fixes 1 record
Priority LOW 10
SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an S…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.01177 · Published 2005-08-23 · Fixed CWE-255
