Debian Security Bug TrackerDEBIANCVE:CVE-2001-1585CVE-2001-1585
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
85.1%
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user’s authorized_keys file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openssh | < 1:9.2p1-2+deb12u3 | openssh_1:9.2p1-2+deb12u3_all.deb |
| Debian | 11 | all | openssh | < 1:8.4p1-5+deb11u3 | openssh_1:8.4p1-5+deb11u3_all.deb |
| Debian | 999 | all | openssh | < 1:9.9p1-1 | openssh_1:9.9p1-1_all.deb |
| Debian | 13 | all | openssh | < 1:9.9p1-1 | openssh_1:9.9p1-1_all.deb |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
85.1%