{"action":"Upgrade openssh to 1:4.7p1-10 or later.","affected":[{"fixed":"1:4.7p1-10","introduced":"0"}],"component":"openssh","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1:4.7p1-10"],"id":"tcs_01M5N91JG8EETSM07P4SPBC899","modified_at":"2026-10-23T17:47:29.657200697Z","published_at":"2008-05-18T14:20:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-2285","https://security-tracker.debian.org/tracker/CVE-2008-2285"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-2285#Debian:14/openssh","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-2285"}],"summary":"The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by gues"}