PT-2001-1755 · Ssh · Ssh Secure Shell

Publicado 2001-08-14 · Atualizado 2017-10-10 · CVE-2001-0553

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SSH Secure Shell version 3.0.0

Description: The issue concerns improper password authentication to the sshd2 daemon, allowing local users to gain access to certain accounts. Specifically, it affects accounts with short password fields, such as locked accounts that use "NP" in the password field.

Recommendations: For SSH Secure Shell version 3.0.0, consider updating the password authentication mechanism to properly handle short password fields, or restrict access to locked accounts until a proper fix is applied. As a temporary workaround, avoid using short password fields, especially "NP" in locked accounts, to minimize the risk of unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2001-0553

Produtos afetados

Ssh Secure Shell

Referências · 9

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html · Exploit
• 🔥 https://exploit-db.com/exploits/21021 · Exploit
• http://ssh.com/products/ssh/exploit.cfm · Nota
• http://securityfocus.com/bid/3078 · Nota
• http://ciac.org/ciac/bulletins/l-121.shtml · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0553 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6868 · Nota
• http://osvdb.org/586 · Nota
• http://kb.cert.org/vuls/id/737451 · Nota