CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-4478

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 75.5%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2010-4478

Openbsd » Openssh » Version: N/A

cpe:2.3:a:openbsd:openssh:-
Openbsd » Openssh » Version: 1.2

cpe:2.3:a:openbsd:openssh:1.2
Openbsd » Openssh » Version: 1.2.1

cpe:2.3:a:openbsd:openssh:1.2.1
Openbsd » Openssh » Version: 1.2.2

cpe:2.3:a:openbsd:openssh:1.2.2
Openbsd » Openssh » Version: 1.2.27

cpe:2.3:a:openbsd:openssh:1.2.27
Openbsd » Openssh » Version: 1.2.3

cpe:2.3:a:openbsd:openssh:1.2.3
Openbsd » Openssh » Version: 1.3

cpe:2.3:a:openbsd:openssh:1.3
Openbsd » Openssh » Version: 1.5

cpe:2.3:a:openbsd:openssh:1.5
Openbsd » Openssh » Version: 1.5.7

cpe:2.3:a:openbsd:openssh:1.5.7
Openbsd » Openssh » Version: 1.5.8

cpe:2.3:a:openbsd:openssh:1.5.8
Openbsd » Openssh » Version: 2

cpe:2.3:a:openbsd:openssh:2
Openbsd » Openssh » Version: 2.1

cpe:2.3:a:openbsd:openssh:2.1
Openbsd » Openssh » Version: 2.1.0

cpe:2.3:a:openbsd:openssh:2.1.0
Openbsd » Openssh » Version: 2.1.1

cpe:2.3:a:openbsd:openssh:2.1.1
Openbsd » Openssh » Version: 2.2

cpe:2.3:a:openbsd:openssh:2.2
Openbsd » Openssh » Version: 2.2.0

cpe:2.3:a:openbsd:openssh:2.2.0
Openbsd » Openssh » Version: 2.3

cpe:2.3:a:openbsd:openssh:2.3
Openbsd » Openssh » Version: 2.3.0

cpe:2.3:a:openbsd:openssh:2.3.0
Openbsd » Openssh » Version: 2.3.1

cpe:2.3:a:openbsd:openssh:2.3.1
Openbsd » Openssh » Version: 2.5

cpe:2.3:a:openbsd:openssh:2.5
Openbsd » Openssh » Version: 2.5.1

cpe:2.3:a:openbsd:openssh:2.5.1
Openbsd » Openssh » Version: 2.5.2

cpe:2.3:a:openbsd:openssh:2.5.2
Openbsd » Openssh » Version: 2.9

cpe:2.3:a:openbsd:openssh:2.9
Openbsd » Openssh » Version: 2.9.9

cpe:2.3:a:openbsd:openssh:2.9.9
Openbsd » Openssh » Version: 2.9.9p2

cpe:2.3:a:openbsd:openssh:2.9.9p2
Openbsd » Openssh » Version: 2.9p1

cpe:2.3:a:openbsd:openssh:2.9p1
Openbsd » Openssh » Version: 2.9p2

cpe:2.3:a:openbsd:openssh:2.9p2
Openbsd » Openssh » Version: 3.0

cpe:2.3:a:openbsd:openssh:3.0
Openbsd » Openssh » Version: 3.0.1

cpe:2.3:a:openbsd:openssh:3.0.1
Openbsd » Openssh » Version: 3.0.1p1

cpe:2.3:a:openbsd:openssh:3.0.1p1
Openbsd » Openssh » Version: 3.0.2

cpe:2.3:a:openbsd:openssh:3.0.2
Openbsd » Openssh » Version: 3.0.2p1

cpe:2.3:a:openbsd:openssh:3.0.2p1
Openbsd » Openssh » Version: 3.0p1

cpe:2.3:a:openbsd:openssh:3.0p1
Openbsd » Openssh » Version: 3.1

cpe:2.3:a:openbsd:openssh:3.1
Openbsd » Openssh » Version: 3.1p1

cpe:2.3:a:openbsd:openssh:3.1p1
Openbsd » Openssh » Version: 3.2

cpe:2.3:a:openbsd:openssh:3.2
Openbsd » Openssh » Version: 3.2.2

cpe:2.3:a:openbsd:openssh:3.2.2
Openbsd » Openssh » Version: 3.2.2p1

cpe:2.3:a:openbsd:openssh:3.2.2p1
Openbsd » Openssh » Version: 3.2.3

cpe:2.3:a:openbsd:openssh:3.2.3
Openbsd » Openssh » Version: 3.2.3p1

cpe:2.3:a:openbsd:openssh:3.2.3p1
Openbsd » Openssh » Version: 3.3

cpe:2.3:a:openbsd:openssh:3.3
Openbsd » Openssh » Version: 3.3p1

cpe:2.3:a:openbsd:openssh:3.3p1
Openbsd » Openssh » Version: 3.4

cpe:2.3:a:openbsd:openssh:3.4
Openbsd » Openssh » Version: 3.4p1

cpe:2.3:a:openbsd:openssh:3.4p1
Openbsd » Openssh » Version: 3.5

cpe:2.3:a:openbsd:openssh:3.5
Openbsd » Openssh » Version: 3.5p1

cpe:2.3:a:openbsd:openssh:3.5p1
Openbsd » Openssh » Version: 3.6

cpe:2.3:a:openbsd:openssh:3.6
Openbsd » Openssh » Version: 3.6.1

cpe:2.3:a:openbsd:openssh:3.6.1
Openbsd » Openssh » Version: 3.6.1p1

cpe:2.3:a:openbsd:openssh:3.6.1p1
Openbsd » Openssh » Version: 3.6.1p2

cpe:2.3:a:openbsd:openssh:3.6.1p2
Openbsd » Openssh » Version: 3.7

cpe:2.3:a:openbsd:openssh:3.7
Openbsd » Openssh » Version: 3.7.1

cpe:2.3:a:openbsd:openssh:3.7.1
Openbsd » Openssh » Version: 3.7.1p1

cpe:2.3:a:openbsd:openssh:3.7.1p1
Openbsd » Openssh » Version: 3.7.1p2

cpe:2.3:a:openbsd:openssh:3.7.1p2
Openbsd » Openssh » Version: 3.8

cpe:2.3:a:openbsd:openssh:3.8
Openbsd » Openssh » Version: 3.8.1

cpe:2.3:a:openbsd:openssh:3.8.1
Openbsd » Openssh » Version: 3.8.1p1

cpe:2.3:a:openbsd:openssh:3.8.1p1
Openbsd » Openssh » Version: 3.9

cpe:2.3:a:openbsd:openssh:3.9
Openbsd » Openssh » Version: 3.9.1

cpe:2.3:a:openbsd:openssh:3.9.1
Openbsd » Openssh » Version: 3.9.1p1

cpe:2.3:a:openbsd:openssh:3.9.1p1
Openbsd » Openssh » Version: 4.0

cpe:2.3:a:openbsd:openssh:4.0
Openbsd » Openssh » Version: 4.0p1

cpe:2.3:a:openbsd:openssh:4.0p1
Openbsd » Openssh » Version: 4.1

cpe:2.3:a:openbsd:openssh:4.1
Openbsd » Openssh » Version: 4.1p1

cpe:2.3:a:openbsd:openssh:4.1p1
Openbsd » Openssh » Version: 4.2

cpe:2.3:a:openbsd:openssh:4.2
Openbsd » Openssh » Version: 4.2p1

cpe:2.3:a:openbsd:openssh:4.2p1
Openbsd » Openssh » Version: 4.3

cpe:2.3:a:openbsd:openssh:4.3
Openbsd » Openssh » Version: 4.3p1

cpe:2.3:a:openbsd:openssh:4.3p1
Openbsd » Openssh » Version: 4.3p2

cpe:2.3:a:openbsd:openssh:4.3p2
Openbsd » Openssh » Version: 4.4

cpe:2.3:a:openbsd:openssh:4.4
Openbsd » Openssh » Version: 4.4p1

cpe:2.3:a:openbsd:openssh:4.4p1
Openbsd » Openssh » Version: 4.5

cpe:2.3:a:openbsd:openssh:4.5
Openbsd » Openssh » Version: 4.6

cpe:2.3:a:openbsd:openssh:4.6
Openbsd » Openssh » Version: 4.7

cpe:2.3:a:openbsd:openssh:4.7
Openbsd » Openssh » Version: 4.7p1

cpe:2.3:a:openbsd:openssh:4.7p1
Openbsd » Openssh » Version: 4.8

cpe:2.3:a:openbsd:openssh:4.8
Openbsd » Openssh » Version: 4.9

cpe:2.3:a:openbsd:openssh:4.9
Openbsd » Openssh » Version: 5.0

cpe:2.3:a:openbsd:openssh:5.0
Openbsd » Openssh » Version: 5.1

cpe:2.3:a:openbsd:openssh:5.1
Openbsd » Openssh » Version: 5.2

cpe:2.3:a:openbsd:openssh:5.2
Openbsd » Openssh » Version: 5.3

cpe:2.3:a:openbsd:openssh:5.3
Openbsd » Openssh » Version: 5.4

cpe:2.3:a:openbsd:openssh:5.4
Openbsd » Openssh » Version: 5.5

cpe:2.3:a:openbsd:openssh:5.5
Openbsd » Openssh » Version: 5.6

cpe:2.3:a:openbsd:openssh:5.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-4478

Products

Pricing

Contact Us