CVE-2001-1474
Published Jan 18, 2001
Last updated 7 years ago
Overview
- Description
- SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0EDBA45-FDEE-4D4B-A6FF-7E953B523DAE"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AF5BDEF-E86B-4F4D-AF6D-B27044A96B1E"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D0FF07F-E13B-425F-9892-C50B326B2944"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "338EDA76-05D6-48C0-952E-6244A5F206F3"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F719468E-A218-4EB5-9F8D-7841E84F44C8"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E4FCD36-0009-4A93-A190-8FDD11C672CA"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71727854-1B75-465F-AF8C-DFE6EFF46B40"
},
{
"criteria": "cpe:2.3:a:ssh:ssh:1.2.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64B76EA2-D3A6-4751-ADE6-998C2A7B44FA"
}
],
"operator": "OR"
}
]
}
]