CVE-2005-2666

CVE-2005-2666 describes a vulnerability in OpenSSH before version 4.0, where the known_hosts file stores hostnames, IP addresses, and keys in plaintext. This allows an attacker who has compromised an SSH user's account to easily identify additional targets. The vulnerability has a low severity CVSS score of 1.2, indicating a local attack vector with high attack complexity and a partial impact on confidentiality. There is no evidence of active exploitation, no known exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.