CVE-2008-5124

CVE-2008-5124 describes a critical vulnerability in JSCAPE Secure FTP Applet versions 4.8.0 and earlier, where the software fails to prompt users for verification of new or mismatched SSH host keys. This oversight significantly facilitates man-in-the-middle (MITM) attacks, allowing remote attackers to intercept and potentially manipulate sensitive data. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or Nuclei, or significant community discussion or media coverage.