Vulnerability in Ssh

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

EPSS: 0.015 (72.3th percentile) — read the EPSS interpretation.

Affected products

Ssh — versions 1.2.24, 1.2.25, 1.2.26
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, third-party-advisory)