CVE-2007-0844

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2007-0844

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2007-0844.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2007-0844

Downstream

DEBIAN-CVE-2007-0844

Published

2007-02-08T17:28:00Z

Modified

2026-04-10T03:38:02.064113Z

Summary

[none]

Details

The authviakey function in pamssh.c in pamssh before 1.92, when the allowblankpassphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase.

References

http://secunia.com/advisories/24061
http://sourceforge.net/project/shownotes.php?release_id=484376
http://www.vupen.com/english/advisories/2007/0524
http://sourceforge.net/project/shownotes.php?release_id=484376
http://osvdb.org/33119
http://www.securityfocus.com/bid/22461

CVE-2007-0844

Affected packages