CVE-2005-2798
- State
- Published
- Severity
- Not scored
- Published
- Sep 6, 2005
- Updated
- Aug 7, 2024
- Reserved
- Sep 6, 2005
Description
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2005:527vendor-advisory
- hpux-secure-shell-dos(24064)vdb-entry
- 18507third-party-advisory
- HPSBUX02090vendor-advisory
- SUSE-SR:2006:003vendor-advisory
- 19141vdb-entry
- 18406third-party-advisory
- 14729vdb-entry
- oval:org.mitre.oval:def:9717vdb-entrysignature
- 18717third-party-advisory
- 17077third-party-advisory
- ADV-2006-0144vdb-entry
- oval:org.mitre.oval:def:1566vdb-entrysignature
- oval:org.mitre.oval:def:1345vdb-entrysignature
- http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm
- 17245third-party-advisory
- 18661third-party-advisory
- 18010third-party-advisory
- [openssh-unix-announce] 20050901 Announce: OpenSSH 4.2 releasedmailing-list
- MDKSA-2005:172vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm
- 1014845vdb-entry
- USN-209-1vendor-advisory
- 16686third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.