Page 3 of 12 results (0.003 seconds)

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0

SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server. • http://secunia.com/advisories/15894 http://www.ssh.com/company/newsroom/article/653 •

CVSS: 3.7EPSS: 0%CPEs: 2EXPL: 0

Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key. • http://secunia.com/advisories/11193 http://securitytracker.com/alerts/2004/Mar/1009532.html http://www.kb.cert.org/vuls/id/814198 http://www.osvdb.org/displayvuln.php?osvdb_id=4491 http://www.securityfocus.com/bid/9956 http://www.ssh.com/company/newsroom/article/520 https://exchange.xforce.ibmcloud.com/vulnerabilities/15585 •