PT-2001-2559 · Ssh1 · Ssh1

Publicado 2001-01-18 · Atualizado 2017-07-11 · CVE-2001-1469

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SSH1

Description The issue allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified. This is related to the use of the RC4 stream cipher in SSH1.

Recommendations For SSH1, consider disabling the use of the RC4 stream cipher as a temporary workaround until a more secure alternative is implemented. Restrict access to sensitive data transmitted over SSH1 to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-1469

Produtos afetados

Ssh1

Referências · 3

• 🔥 http://kb.cert.org/vuls/id/25309 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6449 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1469 · Nota de Segurança