Vulnerability in Ssh

CVE-2001-1469

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.

EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.

Affected products

  • Ssh — versions 1.2.24, 1.2.25, 1.2.26
  • N/a — versions n/a

References

  • cve@mitre.org (vdb-entry, x_refsource_XF)
  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Exploit, third-party-advisory)