CVE-2001-1470 The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic re...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check (CRC) to match the modifications to the message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh | = 1.2.24 | No fix listed |
| ssh | = 1.2.25 | No fix listed |
| ssh | = 1.2.26 | No fix listed |
| ssh | = 1.2.27 | No fix listed |
| ssh | = 1.2.28 | No fix listed |
| ssh | = 1.2.29 | No fix listed |
| ssh | = 1.2.30 | No fix listed |
| ssh | = 1.2.31 | No fix listed |
References
- VU#315308 third-party-advisory us-government-resource
- ssh-idea-modify-packets(6472) vdb-entry