SSH Tectia Server < 5.0.1 Host Authentication Authorization Bypass

high Nessus Network Monitor Plugin ID 3329

Synopsis

It is possible to bypass the authentication of the remote SSH server.

Description

The remote host is running the Tectia SSH Server. This version of Tectia is older than 5.0.1. Versions older than 5.0.1 are vulnerable to a flaw in which an attacker may bypass the authentication routine. However the SSH server must be configured to use Host-Based authentication only.

Solution

Upgrade to version 5.0.1 or higher.

Plugin Details

Severity: High

ID: 3329

Family: SSH

Published: 12/16/2005

Updated: 3/6/2019

Nessus ID: 20316

Risk Information

VPR

Risk Factor: Medium

Score: 5.5

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ssh:tectia_server

Reference Information

CVE: CVE-2005-4310

BID: 15903

Detections

Analytics