OSVDB ID: 50035

Title: SSH Tectia Multiple Products CBC Mode Chosen Ciphertext 32-bit Chunk Plaintext Context Disclosure

Info

Disclosure

Nov 17, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Cryptographic, Information Disclosure
Impact: Loss of Confidentiality
Solution: Patch / RCS, Upgrade
Disclosure: Vendor Verified
OSVDB: Security Software

Solution

Products

Unknown or Incomplete

References

Security Tracker: 1021235 1021236 1021382
OVAL ID: 11279
CVE ID: 2008-5161 (see also: NVD)
Bugtraq ID: 32319
Secunia Advisory ID: 32740 32760 32833 33121 33308 34857 36308 36558 38851 40234
ISS X-Force ID: 46620
Related OSVDB ID: 49872 50036
CERT VU: 958563
VUPEN Advisory: ADV-2008-3172 ADV-2008-3173 ADV-2008-3409 ADV-2009-1135 ADV-2009-3184
Keyword: c01820968,HPSBMA02447,SSRT090062
Vendor Specific Advisory URL: http://aix.software.ibm.com/aix/efixes/security/openssh_advisory.asc
http://support.attachmate.com/techdocs/2398.html
http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0011
http://www.ssh.com/company/news/article/953/
https://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01820968
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2009-08/0111.html
http://archives.neohapsis.com/archives/fulldisclosure/2008-11/0350.html
http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
http://marc.info/?l=bugtraq&m=125017764422557&w=2
Other Advisory URL: http://isc.sans.org/diary.html?storyid=5366
http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm
http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
Vendor Specific News/Changelog Entry: http://openssh.org/txt/cbc.adv
http://support.apple.com/kb/HT3937
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
Vendor Specific Solution URL: http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
RedHat RHSA: https://rhn.redhat.com/errata/RHSA-2009-1287.html

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/50035