5

CVE-2001-1469

Exploit

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.

Data is provided by the National Vulnerability Database (NVD)
Ssh ≫ Ssh Version1.2.24
Ssh ≫ Ssh Version1.2.25
Ssh ≫ Ssh Version1.2.26
Ssh ≫ Ssh Version1.2.27
Ssh ≫ Ssh Version1.2.28
Ssh ≫ Ssh Version1.2.29
Ssh ≫ Ssh Version1.2.30
Ssh ≫ Ssh Version1.2.31
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.48% 0.624
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
http://www.kb.cert.org/vuls/id/25309
US Government Resource
Exploit