PT-2001-2564 · Openssh · Ssh

Publicado 2001-01-18 · Atualizado 2017-07-11 · CVE-2001-1474

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SSH versions prior to 2.0

Description The issue allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache, as SSH before version 2.0 disables host key checking when connecting to the localhost.

Recommendations For versions prior to 2.0, update to version 2.0 or later to enable host key checking and prevent DNS cache poisoning attacks.

Correção

Identificadores relacionados

CVE-2001-1474

Produtos afetados

Ssh

Referências · 3

• http://kb.cert.org/vuls/id/786900 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6604 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1474 · Nota de Segurança