PT-1999-1084 · Openssh · Ssh

Published 1999-01-01 · Updated 2022-08-17 · CVE-1999-0398

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SSH versions 1.2.27 and 2.0.11

Description The issue allows users with expired accounts to login in certain instances of SSH on Linux systems.

Recommendations For SSH version 1.2.27, update to a version that addresses the issue of allowing logins from users with expired accounts. For SSH version 2.0.11, update to a version that addresses the issue of allowing logins from users with expired accounts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-0398

Affected Products

Ssh

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0398 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0398 · Note