Vulnerability in Openbsd Openssh

CVE-2005-2798

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.

EPSS: 0.023 (81.5th percentile) — read the EPSS interpretation.

Affected products

References