SSH connections using RC4 and password authentication can be replayed

Overview This vulnerability may allow an attacker to replay a captured SSH1 session. Description Preconditions: Client requests RC4 and the server grants request Client uses password authentication When an SSH1 session using the RC4 cipher is established, the client and server agree upon a sessio...

Weak CRC allows RC4 encrypted SSH1 packets to be modified without notice

Overview There is an information integrity vulnerability in the SSH1 protocol that allows RC4 encrypted packets to be modified without notice. Description Preconditions: Client has requested RC4 and server supports it. Compression is disabled. When using the RC4 stream cipher, SSH1 uses a cyclic...

PT-2010-5688 · Suse +2 · Suse Linux Enterprise +2

Name of the Vulnerable Software and Affected Versions: SUSE Linux Enterprise versions prior to 2.6.34-rc4 kernel-vmipae-debuginfo affected versions not specified kernel-kdumppae-debuginfo affected versions not specified Description: The issue is related to multiple vulnerabilities in the Linux...