Insecure Permissions in SSH Host Identification Key Generation

CVE-2005-2146 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows local users to access the key and spoof the server.

Learn more about our Cis Benchmark Audit For Server Software.