PT-2001-1755 · Ssh · Ssh Secure Shell

Published 2001-08-14 · Updated 2017-10-10 · CVE-2001-0553

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SSH Secure Shell version 3.0.0

Description: The issue concerns improper password authentication to the sshd2 daemon, allowing local users to gain access to certain accounts. Specifically, it affects accounts with short password fields, such as locked accounts that use "NP" in the password field.

Recommendations: For SSH Secure Shell version 3.0.0, consider updating the password authentication mechanism to properly handle short password fields, or restrict access to locked accounts until a proper fix is applied. As a temporary workaround, avoid using short password fields, especially "NP" in locked accounts, to minimize the risk of unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2001-0553

Affected Products

Ssh Secure Shell

References · 9

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html · Exploit
• 🔥 https://exploit-db.com/exploits/21021 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0553 · Security Note
• http://ssh.com/products/ssh/exploit.cfm · Note
• http://securityfocus.com/bid/3078 · Note
• http://ciac.org/ciac/bulletins/l-121.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6868 · Note
• http://osvdb.org/586 · Note
• http://kb.cert.org/vuls/id/737451 · Note