7.5

CVE-2001-1476

Exploit

EPSS 0.36%
Published 18.01.2001 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user sessions with certain modifications, which trigger different messages depending on whether the guess is correct or not.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Ssh ≫ Ssh Version1.2.24

Ssh ≫ Ssh Version1.2.25

Ssh ≫ Ssh Version1.2.26

Ssh ≫ Ssh Version1.2.27

Ssh ≫ Ssh Version1.2.28

Ssh ≫ Ssh Version1.2.29

Ssh ≫ Ssh Version1.2.30

Ssh ≫ Ssh Version1.2.31

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.36%	0.549

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

https://exchange.xforce.ibmcloud.com/vulnerabilities/6490

http://www.kb.cert.org/vuls/id/565052

Patch

US Government Resource

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2001-1476

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2001-1476

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2001-1476

EUVD