← Database

CVE-2005-2798

MEDIUM CVSS: 5.0 Published: 2005-09-06 Modified: 2026-06-16

Description

sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.

Affected Platforms

Openbsd Openssh

Weakness Type

NVD-CWE-Other

References