CVE-2008-0535

Опубликовано: 22 мая 2008

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device instability) via "SSH credentials that attempt to change the authentication method," aka Bug ID CSCsm14239.

Ссылки

http://secunia.com/advisories/30316
Vendor Advisory
http://secunia.com/advisories/30590
Vendor Advisory
http://securitytracker.com/id?1020074
http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml
Patch
http://www.icon-labs.com/news/read.asp?newsID=77
http://www.kb.cert.org/vuls/id/626979
US Government Resource
http://www.securityfocus.com/bid/29316
http://www.securityfocus.com/bid/29609
http://www.vupen.com/english/advisories/2008/1604/references
Vendor Advisory
http://www.vupen.com/english/advisories/2008/1774/references
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42567
http://secunia.com/advisories/30316
Vendor Advisory
http://secunia.com/advisories/30590
Vendor Advisory
http://securitytracker.com/id?1020074
http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtml
Patch
http://www.icon-labs.com/news/read.asp?newsID=77
http://www.kb.cert.org/vuls/id/626979
US Government Resource
http://www.securityfocus.com/bid/29316
http://www.securityfocus.com/bid/29609
http://www.vupen.com/english/advisories/2008/1604/references
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:service_control_engine:*:*:*:*:*:*:*:*

Версия до 3.1.5 (включая)

cpe:2.3:a:icon-labs:iconfidant_ssh:*:*:*:*:*:*:*:*

Версия до 2.3.7 (включая)

EPSS

Процентиль: 88%

0.0367

Низкий

7.8 High

CVSS2

Дефекты

CWE-255

Связанные уязвимости

GHSA-9wj4-c5x9-5hgv

github

почти 4 года назад