CVE-2008-2285: Ubuntu Linux

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.

Affected products

• Ubuntu Linux: version 7.04 only; version 7.10 only; version 8.04 only

Published 2008-05-18. Last modified 2026-06-16.