CVE-2001-0572
Severity:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/08/2001
Last modified:
05/09/2008
Description
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:* | ||
cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page