PT-2001-2559 · Ssh1 · Ssh1

Published 2001-01-18 · Updated 2017-07-11 · CVE-2001-1469

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SSH1

Description The issue allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified. This is related to the use of the RC4 stream cipher in SSH1.

Recommendations For SSH1, consider disabling the use of the RC4 stream cipher as a temporary workaround until a more secure alternative is implemented. Restrict access to sensitive data transmitted over SSH1 to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-1469

Affected Products

Ssh1

References · 3

• 🔥 http://kb.cert.org/vuls/id/25309 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1469 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6449 · Note