PT-2001-2563 · Openssh · Openssh

Published 2001-01-18 · Updated 2025-09-22 · CVE-2001-1473

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenSSH (affected versions not specified)

Description The issue allows remote servers to conduct man-in-the-middle attacks by exploiting the SSH-1 protocol. This is done by creating a Session ID that matches the target server's Session ID but uses a weaker public key pair. The attacker can then compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2001-1473

Affected Products

Openssh

References · 5

• 🔥❌ https://github.com/0xget/cve-2001-1473 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2001-1473 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6603 · Note
• http://kb.cert.org/vuls/id/684820 · Note
• https://t.me/aptreports/14823 · Telegram Post