Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 3 products
| Date | Total | Labels |
|---|
| 2026-02-24 | 1 | General1 |
| 2026-03-30 | 1 | False Positive1 |
@DerekUrizar Urizar, I'm going to make it easy for you, with this you can access it. Target: guatemalavisible[.]net IP: 107.180.40.138 CVE: CVE-2025-67896 CVE-2024-3566 CVE-2023-38408 CVE-2022-37454 CVE-2021-41617 CVE-2020-15778 CVE-2019-16905 CVE-2017-8923 CVE-2013-2220 CVE-2008-3844
Post summary
The message lists a series of CVE identifiers and a target IP but provides no additional technical or operational details.
糞品質ASMがOpenSSHを使っているだけで2008年のRHEL限定のCVE-2008-3844を検出してきて腹が立つ 元凶はNVDのcpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*をそのまま適用しているからである https://nvd.nist.gov/vuln/detail/CVE-2008-3844
Post summary
The author complains that their quality‑poor detection system incorrectly flags CVE‑2008‑3844 on any system using OpenSSH due to a mis‑applied NVD CPE. This highlights a false‑positive issue rather than a true vulnerability or exploit.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openbsd | openssh | - | - | - |
| OS | redhat | enterprise_linux | 4.5.z | - | - |
| OS | redhat | enterprise_linux | 4.5.z | - | - |
| OS | redhat | enterprise_linux | 5.0 | - | - |
| OS | redhat | enterprise_linux_desktop | 4 | - | - |
| OS | redhat | enterprise_linux_desktop | 5 | - | - |