CVE-2001-1469 The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of a...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh | = 1.2.24 | No fix listed |
| ssh | = 1.2.25 | No fix listed |
| ssh | = 1.2.26 | No fix listed |
| ssh | = 1.2.27 | No fix listed |
| ssh | = 1.2.28 | No fix listed |
| ssh | = 1.2.29 | No fix listed |
| ssh | = 1.2.30 | No fix listed |
| ssh | = 1.2.31 | No fix listed |
References
- VU#25309 exploit third-party-advisory us-government-resource
- ssh-rc4-modify-packets(6449) vdb-entry