CVE-2001-0572

Published Aug 22, 2001

Last updated 16 years ago

Overview

Description: The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:openbsd:openssh:4.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9B72CFB3-39C7-469C-AA59-69F5B8993BF7"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D0FF07F-E13B-425F-9892-C50B326B2944"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "338EDA76-05D6-48C0-952E-6244A5F206F3"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F719468E-A218-4EB5-9F8D-7841E84F44C8"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E4FCD36-0009-4A93-A190-8FDD11C672CA"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "71727854-1B75-465F-AF8C-DFE6EFF46B40"
          },
          {
            "criteria": "cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References