CVE Vulnerabilities

CVE-2001-0572

Published: Aug 22, 2001 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.

Affected Software

Name Vendor Start Version End Version
Openssh Openbsd 4.5 4.5
Ssh Ssh 1.2.24 1.2.24
Ssh Ssh 1.2.25 1.2.25
Ssh Ssh 1.2.26 1.2.26
Ssh Ssh 1.2.27 1.2.27
Ssh Ssh 1.2.28 1.2.28
Ssh Ssh 1.2.29 1.2.29
Ssh Ssh 1.2.30 1.2.30
Ssh Ssh 1.2.31 1.2.31

References