CVE-2001-0572 The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) passw...
HighCVSS 7.5
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | = 4.5 | No fix listed |
| ssh | = 1.2.24 | No fix listed |
| ssh | = 1.2.25 | No fix listed |
| ssh | = 1.2.26 | No fix listed |
| ssh | = 1.2.27 | No fix listed |
| ssh | = 1.2.28 | No fix listed |
| ssh | = 1.2.29 | No fix listed |
| ssh | = 1.2.30 | No fix listed |
| ssh | = 1.2.31 | No fix listed |
References
- 20010318 Passive Analysis of SSH (Secure Shell) Traffic exploit mailing-list patch vendor-advisory
- CLA-2001:391 vendor-advisory
- VU#596827 third-party-advisory us-government-resource
- MDKSA-2001:033 patch vendor-advisory
- RHSA-2001:033 patch vendor-advisory