VDB

GCVE-110-CERTCC-2005-973635

GCVE-110-CERTCC-2005-973635
Advisory Published
Vulnetix · Advisory published June 30, 2005
SSH provides remote, encrypted terminal access to hosts. Some SSH servers, when running on Microsoft Windows, set insecure permissions on the file storing the private SSH server hostkey. This could allow an authenticated user to obtain the SSH hostkey and use it to impersonate the server.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact5population8exploitation0widely_known20score_current3.45ease_of_exploitation20

Aliases

CVE-2005-2146

References

Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
url
Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
url
Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
url
Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
url
Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
url
Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
url
Some SSH servers on Microsoft Windows set insecure permissions for the host identification key file
advisory

Browse GCVE Records

73,866 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›