CVE-2010-4478

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-06 · updated 2026-06-16
Weakness: CWE-287

Description

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.

Affected products

OpenSSH: through 5.6; 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27, 1.3 (+71)

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/jpake.c#rev1.5
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/jpake.c.diff?r1=1.4%3Br2=1.5%3Bf=h
https://bugzilla.redhat.com/show_bug.cgi?id=659297
https://github.com/seb-m/jpake
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12338
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
http://seb.dbzteam.org/crypto/jpake-session-key-retrieval.pdf
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/jpake.c#rev1.5
http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/jpake.c.diff?r1=1.4%3Br2=1.5%3Bf=h
https://bugzilla.redhat.com/show_bug.cgi?id=659297

Get alerted when CVE-2010-4478 or the next vulnerability affects your stack