Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

openssh: information disclosure

Package(s):

openssh

CVE #(s):

CVE-2008-5161

Created:

September 2, 2009

Updated:

March 8, 2010

Description:

Openssh is vulnerable to a specific man-in-the-middle attack which could be able to obtain a piece of plain text when the CBC cipher mode is used.

Alerts:

(Log in to post comments)