---
cve: "CVE-2005-2666"
severity: "LOW"
cvss: 3.1
epss: "1.2%"
vendor: "n/a"
kev: false
exploited: false
published: "2005-08-23 04:00:00"
tags: [cve, security, low]
source: tsecurity.de CVE-Dossier
exported: "2026-09-11T12:08:55+02:00"
---

# CVE-2005-2666

> 3.1 LOW

## Beschreibung

SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.

## Referenzen

- <https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10201>
- <http://secunia.com/advisories/25098>
- <http://www.redhat.com/support/errata/RHSA-2007-0257.html>
- <http://secunia.com/advisories/19243>
- <http://www.eweek.com/article2/0%2C1759%2C1815795%2C00.asp>
- <http://nms.csail.mit.edu/projects/ssh/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2005-2666) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_