5

CVE-2001-1469

Exploit
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ssh ≫ Ssh Version1.2.24
Ssh ≫ Ssh Version1.2.25
Ssh ≫ Ssh Version1.2.26
Ssh ≫ Ssh Version1.2.27
Ssh ≫ Ssh Version1.2.28
Ssh ≫ Ssh Version1.2.29
Ssh ≫ Ssh Version1.2.30
Ssh ≫ Ssh Version1.2.31
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.624
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
http://www.kb.cert.org/vuls/id/25309
US Government Resource
Exploit