CVE-2007-0844

Name: CVE-2007-0844
Creator: NVD / NIST
Published: 2007-02-08T17:28:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.83%

Last modified Jun 16, 2026

CVE-2007-0844 is a vulnerability of currently unknown severity. The auth_via_key function in pam_ssh.c in pam_ssh before 1.92, when the allow_blank_passphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase.. EPSS estimates a 0.83% chance of exploitation in the next 30 days.

Description

The auth_via_key function in pam_ssh.c in pam_ssh before 1.92, when the allow_blank_passphrase option is disabled, allows remote attackers to bypass authentication restrictions and use private encryption keys requiring a blank passphrase by entering a non-blank passphrase.

Metrics

EPSS Probability

0.83%

53.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Pam Ssh	Pam Ssh	1.91

References

http://osvdb.org/33119
http://secunia.com/advisories/24061Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=484376Patch, Vendor Advisory
http://www.securityfocus.com/bid/22461
http://www.vupen.com/english/advisories/2007/0524
http://osvdb.org/33119
http://secunia.com/advisories/24061Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=484376Patch, Vendor Advisory
http://www.securityfocus.com/bid/22461
http://www.vupen.com/english/advisories/2007/0524

Timeline

Published: Feb 8, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-0844?

How severe is CVE-2007-0844?

Severity scoring for CVE-2007-0844 is pending analysis. The EPSS model estimates a 0.83% probability of exploitation in the next 30 days.

How do I fix CVE-2007-0844?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2007-0844?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST