Vulnerabilities

TI-2021-09232 CVE-2021-27892 · GHSA-fr42-5phv-6f32

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation.

LOW 34

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0026 Published 2021-03-15 No fix listed

TI-2021-09231 CVE-2021-27891 · GHSA-pc4j-6344-24x7

SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation.

MEDIUM 40

SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01076 Published 2021-03-15 No fix listed

TI-2021-09233 CVE-2021-27893 · GHSA-2c9c-5m3c-vxqg

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in…

LOW 31

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00395 Published 2021-03-15 No fix listed

TI-2008-04912 CVE-2008-5161 · GHSA-c9pj-mwph-2xjm

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0…

LOW 35

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux o…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.18551 Published 2008-11-19 Fixed CWE-329

TI-2007-05397 CVE-2007-5616 · GHSA-7h8q-3jfw-6gxv

ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on…

LOW 33

ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00942 Published 2008-01-09 No fix listed

TI-2006-05295 CVE-2006-5484 · GHSA-f6g8-8p5j-hphv

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and…

LOW 26

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers t…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01379 Published 2006-10-24 No fix listed

TI-2006-04168 CVE-2006-4315 · GHSA-xvxg-vgch-8ccv

Unquoted Windows search path vulnerability in multiple SSH Tectia products, including…

LOW 32

Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and earlier, when running on Windows, might a…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00341 Published 2006-08-23 No fix listed

Vulnerabilities

Filters

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation.

SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation.

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in…

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0…

ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on…

SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and…

Unquoted Windows search path vulnerability in multiple SSH Tectia products, including…