CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2666

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.8%

CVSS Severity

CVSS v2 Score 1.2

References

Products affected by CVE-2005-2666

Openbsd » Openssh » Version: 3.0

cpe:2.3:a:openbsd:openssh:3.0
Openbsd » Openssh » Version: 3.0.1

cpe:2.3:a:openbsd:openssh:3.0.1
Openbsd » Openssh » Version: 3.0.1p1

cpe:2.3:a:openbsd:openssh:3.0.1p1
Openbsd » Openssh » Version: 3.0.2

cpe:2.3:a:openbsd:openssh:3.0.2
Openbsd » Openssh » Version: 3.0.2p1

cpe:2.3:a:openbsd:openssh:3.0.2p1
Openbsd » Openssh » Version: 3.0p1

cpe:2.3:a:openbsd:openssh:3.0p1
Openbsd » Openssh » Version: 3.1

cpe:2.3:a:openbsd:openssh:3.1
Openbsd » Openssh » Version: 3.1p1

cpe:2.3:a:openbsd:openssh:3.1p1
Openbsd » Openssh » Version: 3.2

cpe:2.3:a:openbsd:openssh:3.2
Openbsd » Openssh » Version: 3.2.2p1

cpe:2.3:a:openbsd:openssh:3.2.2p1
Openbsd » Openssh » Version: 3.2.3p1

cpe:2.3:a:openbsd:openssh:3.2.3p1
Openbsd » Openssh » Version: 3.3

cpe:2.3:a:openbsd:openssh:3.3
Openbsd » Openssh » Version: 3.3p1

cpe:2.3:a:openbsd:openssh:3.3p1
Openbsd » Openssh » Version: 3.4

cpe:2.3:a:openbsd:openssh:3.4
Openbsd » Openssh » Version: 3.4p1

cpe:2.3:a:openbsd:openssh:3.4p1
Openbsd » Openssh » Version: 3.5

cpe:2.3:a:openbsd:openssh:3.5
Openbsd » Openssh » Version: 3.5p1

cpe:2.3:a:openbsd:openssh:3.5p1
Openbsd » Openssh » Version: 3.6

cpe:2.3:a:openbsd:openssh:3.6
Openbsd » Openssh » Version: 3.6.1

cpe:2.3:a:openbsd:openssh:3.6.1
Openbsd » Openssh » Version: 3.6.1p1

cpe:2.3:a:openbsd:openssh:3.6.1p1
Openbsd » Openssh » Version: 3.6.1p2

cpe:2.3:a:openbsd:openssh:3.6.1p2
Openbsd » Openssh » Version: 3.7

cpe:2.3:a:openbsd:openssh:3.7
Openbsd » Openssh » Version: 3.7.1

cpe:2.3:a:openbsd:openssh:3.7.1
Openbsd » Openssh » Version: 3.7.1p2

cpe:2.3:a:openbsd:openssh:3.7.1p2
Openbsd » Openssh » Version: 3.8

cpe:2.3:a:openbsd:openssh:3.8
Openbsd » Openssh » Version: 3.8.1

cpe:2.3:a:openbsd:openssh:3.8.1
Openbsd » Openssh » Version: 3.8.1p1

cpe:2.3:a:openbsd:openssh:3.8.1p1
Openbsd » Openssh » Version: 3.9

cpe:2.3:a:openbsd:openssh:3.9
Openbsd » Openssh » Version: 3.9.1

cpe:2.3:a:openbsd:openssh:3.9.1
Openbsd » Openssh » Version: 3.9.1p1

cpe:2.3:a:openbsd:openssh:3.9.1p1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2005-2666

Products

Pricing

Contact Us