CVE-2005-2798
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
Exploit likelihood
What each source reports
NVD Score used
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
- Record
CVE-2005-2798- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
- Record
CVE-2005-2798- Updated
- 2026-11-02
EUVDEUVD-2005-2799 No score
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
- Record
EUVD-2005-2799- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qm2w-x4c4-rq55 No score
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
- Record
GHSA-qm2w-x4c4-rq55- Updated
- 2026-11-02
OSV No score
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
- Record
CVE-2005-2798- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2798 No score
sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegated to clients who log in using non-GSSAPI methods, which could cause those credentials to be exposed to untrusted users or hosts.
- Record
DEBIAN-CVE-2005-2798- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensshDebian:12 |
before 1:4.2p1-1 | 1:4.2p1-1 |
opensshDebian:13 |
before 1:4.2p1-1 | 1:4.2p1-1 |
opensshDebian:14 |
before 1:4.2p1-1 | 1:4.2p1-1 |
opensshRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpassRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-clientsRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-serverRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
opensshRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openssh-askpassRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-clientsRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
opensshRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpassRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-clientsRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-serverRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
opensshRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpassRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-askpass-gnomeRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-clientsRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
openssh-serverRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:3.9p1-8.RHEL4.9 | 0:3.9p1-8.RHEL4.9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2798 is a medium vulnerability (CVSS 5.0) in Openbsd Openssh, published September 6, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. Fixed in openssh 1:4.2p1-1.
References
redhat.com/support/errata/RHSA-2005-527.html
exchange.xforce.ibmcloud.com/vulnerabilities/24064
secunia.com/advisories/18507
securityfocus.com/archive/1/421411/100/0/threaded
lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html
osvdb.org/19141
Show 33 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9717
vupen.com/english/advisories/2006/0144
support.avaya.com/elmodocs2/security/ASA-2006-016.htm
mindrot.org/pipermail/openssh-unix-announce/2005-September/000083.html
mandriva.com/security/advisories?name=MDKSA-2005:172
securitytracker.com/id?1014845
usn.ubuntu.com/209-1
nvd.nist.gov/vuln/detail/CVE-2005-2798
github.com/advisories/GHSA-qm2w-x4c4-rq55
security-tracker.debian.org/tracker/CVE-2005-2798
access.redhat.com/errata/RHSA-2005:527
bugzilla.redhat.com/show_bug.cgi?id=159331
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_527.json
cve.org/CVERecord?id=CVE-2005-2798