Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-3234

30
FAUCET Score

CVE-2008-3234 describes a privilege escalation vulnerability in sshd within OpenSSH 4 on Debian GNU/Linux and the 20070303 OpenSSH snapshot. Authenticated remote users could gain access to arbitrary SELinux roles by manipulating their username with a ":/" sequence followed by the desired role. With a CVSS score of 6.5, this vulnerability has a network attack vector, low attack complexity, and allows for partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-6094) exists, indicating public exploit code, though there is minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
4.0CPE matchmatch criteria
cpe:2.3:a:openbsd:openssh:4.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.5MEDIUM

AV:N/AC:L/Au:S/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Exploitability Score
8.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
5.77%
Probability of exploitation in next 30 days
EPSS Percentile
92.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
ExploitDB: EDB-6094 · Jul 17, 2008
This CVE's current EPSS score of 0.0577 is in the 98th percentile among its peer group of 21,977 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2008-3234

CVE-2008-3234

References

exchange.xforce.ibmcloud.com / vulnerabilities/44037
exploit-db.com / exploits/6094
securityfocus.com / bid/30276
Exploit