3 matches found
CVE-1999-1085
The CVE-1999-1085 issue affects SSH1 protocol implementations (notably OpenSSH and SSH1-supporting SSH stacks) in CBC or CFB mode. A CRC-32 checksum weakness enables a known-plaintext attack to insert arbitrary data into an existing SSH stream between client and server, potentially allowing an at...
CVE-2001-0553
CVE-2001-0553 affects SSH Secure Shell 3.0.0 on Unix systems using password authentication with the sshd2 daemon. The vulnerability occurs when accounts have two or fewer characters in their encrypted password field (e.g., passwords like NP/!!). sshd2 can incorrectly derive the salt and validate ...
CVE-2003-1119
SSH Secure Shell prior to 3.2.9 is affected. The vulnerability allows remote DoS through malformed BER/DER packets, caused by an issue in processing those packets. Affected products are SSH Secure Shell versions 3.2.8 and earlier; remediation is to update to the latest version. Exploitation detai...