CVE-2005-2798

Published: Sep 6, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.

Affected (32)

Products: Openbsd: Openssh

Openbsd

1 product

Openssh

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 3.0.1
Openbsd Openssh	Version 3.0.1p1
Openbsd Openssh	Version 3.0.2
Openbsd Openssh	Version 3.0.2p1
Openbsd Openssh	Version 3.0
Openbsd Openssh	Version 3.0p1
Openbsd Openssh	Version 3.1
Openbsd Openssh	Version 3.1p1
Openbsd Openssh	Version 3.2.2p1
Openbsd Openssh	Version 3.2.3p1
Openbsd Openssh	Version 3.2
Openbsd Openssh	Version 3.3
Openbsd Openssh	Version 3.3p1
Openbsd Openssh	Version 3.4
Openbsd Openssh	Version 3.4p1
Openbsd Openssh	Version 3.5
Openbsd Openssh	Version 3.5p1
Openbsd Openssh	Version 3.6.1
Openbsd Openssh	Version 3.6.1p1
Openbsd Openssh	Version 3.6.1p2
Openbsd Openssh	Version 3.6
Openbsd Openssh	Version 3.7.1
Openbsd Openssh	Version 3.7.1p2
Openbsd Openssh	Version 3.7
Openbsd Openssh	Version 3.8.1
Openbsd Openssh	Version 3.8.1p1
Openbsd Openssh	Version 3.8
Openbsd Openssh	Version 3.9.1
Openbsd Openssh	Version 3.9.1p1
Openbsd Openssh	Version 3.9
Openbsd Openssh	Version 4.0p1
Openbsd Openssh	Version 4.1p1

References (50)

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt (unsafe URL)

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html

Source: secalert@redhat.com

http://secunia.com/advisories/16686

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/17077

Source: secalert@redhat.com

http://secunia.com/advisories/17245

Source: secalert@redhat.com

http://secunia.com/advisories/18010

Source: secalert@redhat.com

http://secunia.com/advisories/18406

Source: secalert@redhat.com

http://secunia.com/advisories/18507

Source: secalert@redhat.com

http://secunia.com/advisories/18661

Source: secalert@redhat.com

http://secunia.com/advisories/18717

Source: secalert@redhat.com

http://securitytracker.com/id?1014845

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-016.htm

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-033.htm

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:172

Source: secalert@redhat.com

http://www.mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html

Source: secalert@redhat.com

http://www.osvdb.org/19141

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-527.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/421411/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14729

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/0144

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/24064

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1345

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1566

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717

Source: secalert@redhat.com

https://usn.ubuntu.com/209-1/

Source: secalert@redhat.com

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.53/SCOSA-2005.53.txt (unsafe URL)