CVE-2005-2666

EPSS 0.07%
發布日:2005/8/23修改日:2026/4/28
也稱為:DEBIAN-CVE-2005-2666

描述

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.

受影響套件(1)

參考連結(1)