CVE-2001-0553 SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as lo...
HighCVSS 7.2
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh secure shell | = 3.0.0 | No fix listed |
References
- 20010720 URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0 exploit mailing-list patch vendor-advisory
- L-121 government-resource third-party-advisory
- VU#737451 third-party-advisory us-government-resource
- 586 vdb-entry
- 3078 vdb-entry
- www.ssh.com
- ssh-password-length-unauth-access(6868) vdb-entry