10

CVE-2001-0144

Exploit
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openbsd ≫ Openssh Version 1.2.2
Openbsd ≫ Openssh Version 1.2.3
Openbsd ≫ Openssh Version 2.1
Openbsd ≫ Openssh Version 2.1.1
Openbsd ≫ Openssh Version 2.2
Ssh ≫ Ssh Version 1.2.24
Ssh ≫ Ssh Version 1.2.25
Ssh ≫ Ssh Version 1.2.26
Ssh ≫ Ssh Version 1.2.27
Ssh ≫ Ssh Version 1.2.28
Ssh ≫ Ssh Version 1.2.29
Ssh ≫ Ssh Version 1.2.30
Ssh ≫ Ssh Version 1.2.31
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 32.42% 0.981
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=98168366406903&w=2
http://razor.bindview.com/publish/advisories/adv_ssh1crc.html
Patch
Vendor Advisory
http://www.cert.org/advisories/CA-2001-35.html
US Government Resource
http://www.osvdb.org/503
http://www.osvdb.org/795
http://www.securityfocus.com/bid/2347
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/6083