CVE-2011-0539

CVE-2011-0539 describes a vulnerability in OpenSSH versions 5.6 and 5.7, specifically within the key_certify function when generating legacy certificates. The uninitialized nonce field could allow remote attackers to access sensitive stack memory or facilitate hash collision attacks. This vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and potentially leading to partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting a low current threat level.