« Volver al listado

CVE-2007-4501

Estado: ModificadaMedia (6.9)—

Vulnerabilidad no especificada en PassphraseRequester de SSHKeychain anterior a 0.8.2 beta permite a los atacantes obtener información sensible (contraseñas) a través de vectores desconocidos, relacionados con una "protección pobre".

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sshkeychain — Sshkeychain

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4501",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-23T19:17:00.000",
  "references": [
    {
      "url": "http://secunia.com/advisories/26617",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/25409",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1018632",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.sshkeychain.org/pipermail/users/2007-August/000098.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.sshkeychain.org/pipermail/users/2007-August/000102.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.sshkeychain.org/pipermail/users/2007-August/000104.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/26617",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/25409",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1018632",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.sshkeychain.org/pipermail/users/2007-August/000098.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.sshkeychain.org/pipermail/users/2007-August/000102.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.sshkeychain.org/pipermail/users/2007-August/000104.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (passwords) via unknown vectors, related to \"poor protection.\""
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en PassphraseRequester de SSHKeychain anterior a 0.8.2 beta permite a los atacantes obtener información sensible (contraseñas) a través de vectores desconocidos, relacionados con una \"protección pobre\"."
    }
  ],
  "lastModified": "2026-06-16T22:44:13.133",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sshkeychain:sshkeychain:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "191707B2-71A5-4F76-A96A-AD8EFB5364AA",
              "versionEndIncluding": "0.8.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}