SSH CRC32 attack detection code contains remote integer overflow

🗓️ 24 Oct 2001 00:00:00Reported by CERTType

cert

cert🔗 www.kb.cert.org👁 54 Views

Remote integer overflow in SSH1 allows code execution as SSH daemon, typically root.

Reporter	Title	Published	Views	Family All 78
Tenable Nessus	SSH1 CRC-32 detect_attack Function Overflow	20 Aug 200400:00	–	nessus
Tenable Nessus	Debian DSA-027-1 : OpenSSH - remote exploit	29 Sep 200400:00	–	nessus
Tenable Nessus	Debian DSA-086-1 : ssh-nonfree - remote root exploit	29 Sep 200400:00	–	nessus
Tenable Nessus	SSH CRC-32 Compensation Attack Remote Overflow	9 Feb 200100:00	–	nessus
CVE	CVE-2001-0144	7 May 200104:00	–	cve
Cvelist	CVE-2001-0144	7 May 200104:00	–	cvelist
NVD	CVE-2001-0144	12 Mar 200105:00	–	nvd
Prion	Design/Logic Flaw	4 Sep 200722:17	–	prion
Positive Technologies	PT-1999-1527 · Openssh +1 · Openssh +1	14 Dec 199900:00	–	ptsecurity
Positive Technologies	PT-2000-1128 · Openssh +1 · Openssh +1	11 Feb 200000:00	–	ptsecurity

Source	Link
razor	www.razor.bindview.com/publish/advisories/adv_ssh1crc.html
cert	www.cert.org/advisories/CA-2001-35.html
www1	www.www1.corest.com/common/showdoc.php
kb	www.kb.cert.org/vuls/id/13877
openssh	www.openssh.com/security.html
securityfocus	www.securityfocus.com/bid/2347
ssh	www.ssh.com/products/ssh/advisories/ssh1_crc-32.cfm
xforce	www.xforce.iss.net/static/6083.php
xforce	www.xforce.iss.net/alerts/advise100.php

20 May 2003 00:24Current

7High risk

Vulners AI Score7

CVSS 210

EPSS0.53307

remote integer overflow ssh1 protocol execute arbitrary code ssh daemon apply patch disable ssh service.