Vulnerability Details : CVE-2008-2285
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.
Exploit prediction scoring system (EPSS) score for CVE-2008-2285
Probability of exploitation activity in the next 30 days: 0.23%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 60 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2008-2285
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
[email protected] |
CWE ids for CVE-2008-2285
-
Assigned by: [email protected] (Primary)
References for CVE-2008-2285
Products affected by CVE-2008-2285
- cpe:2.3:a:ubuntu:linux:7.04:*:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:linux:7.10:*:*:*:*:*:*:*
- cpe:2.3:a:ubuntu:linux:8.04:*:*:*:*:*:*:*