Security Advisory

CVE-2005-2798

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2005-09-06 04:00:00
Last updated 2024-08-07 22:45:02
Assigner redhat
State PUBLISHED

Description

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.