CVEvulnerability

CVE-2008-5161

3.7 LOW Published 2008-11-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-11-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-329

Description

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Affected configurations

• openbsd openssh 4.7p1 • ssh tectia client 4.0 • ssh tectia client 4.0.1 • ssh tectia client 4.0.3 • ssh tectia client 4.0.4 • ssh tectia client 4.0.5 • ssh tectia client 4.2 • ssh tectia client 4.2.1 • ssh tectia client 4.3 • ssh tectia client 4.3.1 • ssh tectia client 4.3.1j • ssh tectia client 4.3.2 • ssh tectia client 4.3.2j • ssh tectia client 4.3.3 • ssh tectia client 4.3.4 • ssh tectia client 4.3.5 • ssh tectia client 4.3.6 • ssh tectia client 4.3.7 • ssh tectia client 4.3.8k • ssh tectia client 4.3.9k • ssh tectia client 4.4 • ssh tectia client 4.4.1 • ssh tectia client 4.4.2 • ssh tectia client 4.4.3 • ssh tectia client 4.4.4 • ssh tectia client 4.4.6 • ssh tectia client 4.4.7 • ssh tectia client 4.4.8 • ssh tectia client 4.4.9 • ssh tectia client 4.4.10 • ssh tectia client 4.4.11 • ssh tectia client 5.0.0 • ssh tectia client 5.0.0f • ssh tectia client 5.0.1 • ssh tectia client 5.0.1f • ssh tectia client 5.0.2 • ssh tectia client 5.0.2f • ssh tectia client 5.0.3 • ssh tectia client 5.0.3f • ssh tectia client 5.1.0 • ssh tectia client 5.1.1 • ssh tectia client 5.1.2 • ssh tectia client 5.1.3 • ssh tectia client 5.2.0 • ssh tectia client 5.2.1 • ssh tectia client 5.2.2 • ssh tectia client 5.2.3 • ssh tectia client 5.2.4 • ssh tectia client 5.3.0 • ssh tectia client 5.3.1 • ssh tectia client 5.3.2 • ssh tectia client 5.3.3 • ssh tectia client 5.3.5 • ssh tectia client 5.3.6 • ssh tectia client 5.3.7 • ssh tectia client 5.3.8 • ssh tectia client 6.0.0 • ssh tectia client 6.0.1 • ssh tectia client 6.0.2 • ssh tectia client 6.0.3 … and 100 more

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-329 Generation of Predictable IV with CBC Mode weakness

References