What is CVE-2001-1382?

CVE-2001-1382 is a vulnerability in Openbsd Openssh. Published 2001-09-27.

Is CVE-2001-1382 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Openbsd Openssh

CVE-2001-1382

The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

EPSS: 0.078 (94.1th percentile) — read the EPSS interpretation.

Affected products

Openbsd Openssh
N/a — versions n/a

Public proof-of-concept exploits

phx/cvescan

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)

Frequently asked questions

What is CVE-2001-1382?: CVE-2001-1382 is a vulnerability in Openbsd Openssh. Published 2001-09-27.
Is CVE-2001-1382 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.