CVE-2001-1475 SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ssh | = 1.2.24 | No fix listed |
| ssh | = 1.2.25 | No fix listed |
| ssh | = 1.2.26 | No fix listed |
| ssh | = 1.2.27 | No fix listed |
| ssh | = 1.2.28 | No fix listed |
| ssh | = 1.2.29 | No fix listed |
| ssh | = 1.2.30 | No fix listed |
| ssh | = 1.2.31 | No fix listed |
References
- VU#665372 patch third-party-advisory us-government-resource
- ssh-rc4-replay-conversation(6490) vdb-entry