SecuritySpace - CVE-2010-4478

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2010-4478

Description: OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.

Test IDs: 1.3.6.1.4.1.25623.1.0.150632

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2010-4478
http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
https://github.com/seb-m/jpake
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12338

CVE ID:	CVE-2010-4478
Description:	OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.
Test IDs:	1.3.6.1.4.1.25623.1.0.150632
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-4478 http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf https://github.com/seb-m/jpake https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12338