Unscored CVE-2005-2189 EUVD-2005-2190GHSA-wmxf-v8cq-9vq8

Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access contr…

Published Jul 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as SSH private keys.

References

15979 third-party-advisory
20050707 Multiple vulnerabilities in Lantronix SLC console server mailing-list