CVE-2000-0575

SSH 1.2.27 with Kerberos authentication stores Kerberos tickets in a file created in the user’s current directory, which could allow an attacker to sniff the ticket cache if the home directory is on NFS. The issue is discussed in CVE-2000-0575 and related sources; a remediation is to upgrade to S...

CVE-2001-0259

The connected sources confirm a vulnerability in SSH Communications Security SSH versions 1.2.27–1.2.30 when Secure-RPC is enabled. A local attacker can cause the system to recover the SUN-DES-1 magic phrase generated for another user, which can then decrypt that user’s private key file. This wea...

Kerberos security vulnerability in SSH-1.2.27

I am writing to report a security bug in SSH 1.2.27. SOFTWARE AFFECTED: SSH 1.2.27 with Kerberos authentication support compiled in i.e. "configure --with-kerberos5". I have contacted SSH Communicators Security http://www.ssh.com about this, and they have just released ssh-1.2.28, which fixes thi...