Lucene search

[email protected]CVE-2001-1475

HistoryJan 18, 2001 - 5:00 a.m.

CVE-2001-1475

2001-01-1805:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ssh

rc4

password authentication

remote attacks

cve-2001-1475

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.3%

JSON

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

CPENameOperatorVersion
ssh:sshssheq1.2.31
ssh:sshssheq1.2.24
ssh:sshssheq1.2.25
ssh:sshssheq1.2.30
ssh:sshssheq1.2.26
ssh:sshssheq1.2.27
ssh:sshssheq1.2.28
ssh:sshssheq1.2.29

CPE	Name	Operator	Version
ssh:ssh	ssh	eq	1.2.31
ssh:ssh	ssh	eq	1.2.24
ssh:ssh	ssh	eq	1.2.25
ssh:ssh	ssh	eq	1.2.30
ssh:ssh	ssh	eq	1.2.26
ssh:ssh	ssh	eq	1.2.27
ssh:ssh	ssh	eq	1.2.28
ssh:ssh	ssh	eq	1.2.29

References

www.kb.cert.org/vuls/id/665372

exchange.xforce.ibmcloud.com/vulnerabilities/6490

7.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.3%

JSON