CVE-2008-5161 Information disclosure in n/a
Remote attackers can recover plaintext data from SSH sessions using CBC mode ciphers due to error handling flaws in SSH implementations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2008-5161?
CVE-2008-5161 is a low-severity vulnerability in OpenSSH, published on 19 Nov 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.
Which versions are affected by CVE-2008-5161?
It affects 5 products.
Linux distribution packages (10)
openssh Red Hat:enterprise_linux:5::client | All versions | 0:4.3p2-36.el5 |
openssh-askpass Red Hat:enterprise_linux:5::client | All versions | 0:4.3p2-36.el5 |
openssh-clients Red Hat:enterprise_linux:5::client | All versions | 0:4.3p2-36.el5 |
openssh-debuginfo Red Hat:enterprise_linux:5::client | All versions | 0:4.3p2-36.el5 |
openssh-server Red Hat:enterprise_linux:5::client | All versions | 0:4.3p2-36.el5 |
openssh Red Hat:enterprise_linux:5::server | All versions | 0:4.3p2-36.el5 |
openssh-askpass Red Hat:enterprise_linux:5::server | All versions | 0:4.3p2-36.el5 |
openssh-clients Red Hat:enterprise_linux:5::server | All versions | 0:4.3p2-36.el5 |
openssh-debuginfo Red Hat:enterprise_linux:5::server | All versions | 0:4.3p2-36.el5 |
openssh-server Red Hat:enterprise_linux:5::server | All versions | 0:4.3p2-36.el5 |
Products include OpenSSH, Ssh Tectia Client, Ssh Tectia Connector, Ssh Tectia Connectsecure, Ssh Tectia Server.
How do I fix CVE-2008-5161?
Apply the vendor's patch.
Is CVE-2008-5161 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-5161 exists.
Public exploit code: 1 Metasploit module and 1 proofs of concept on GitHub.
Other vulnerabilities in OpenSSH
Sources
Also known as DEBIAN-CVE-2008-5161, GHSA-c9pj-mwph-2xjm, RHSA-2009:1287.