CVE-2001-0259 ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key...
LowCVSS 3.6
EPSS 0.84%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh | = 1.2.27 | No fix listed |
| ssh | = 1.2.28 | No fix listed |
| ssh | = 1.2.29 | No fix listed |
| ssh | = 1.2.30 | No fix listed |
References
- 20010116 Bug in SSH1 secure-RPC support can expose users' private keys exploit mailing-list patch vendor-advisory
- 2222 exploit patch vdb-entry vendor-advisory
- www.ssh.com exploit vendor-advisory
- ssh-rpc-private-key(5963) vdb-entry