CVE-2025-32942 | High | 7.2 | 2025-10-02 | SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic. |
CVE-2024-30170 | Critical | 9.1 | 2024-08-06 | PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major ve… |
CVE-2023-48795 | Medium | 5.9 | 2023-12-18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks… |
CVE-2021-27893 | High | 7.0 | 2021-03-15 | SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. ConnectSecure on Windows is affected. |
CVE-2021-27892 | High | 7.8 | 2021-03-15 | SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected. |
CVE-2021-27891 | High | 8.8 | 2021-03-15 | SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected. |
CVE-2012-5975 | | | 2012-12-04 | The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX a… |
CVE-2011-0766 | | | 2011-05-31 | The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictab… |
CVE-2008-5161 | Low | 3.7 | 2008-11-19 | Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and S… |
CVE-2007-5616 | | | 2008-01-09 | ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified ve… |
CVE-2007-2063 | | | 2007-04-18 | SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary p… |
CVE-2006-5484 | | | 2006-10-24 | SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padd… |
CVE-2006-4316 | | | 2006-08-23 | SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when th… |
CVE-2006-4315 | | | 2006-08-23 | Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, a… |
CVE-2005-4310 | | | 2005-12-17 | SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials. |
CVE-2005-2146 | | | 2005-07-05 | SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification k… |
CVE-2003-1120 | | | 2003-12-31 | Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the… |
CVE-2003-1119 | | | 2003-12-31 | SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets. |
CVE-2002-1715 | | | 2002-12-31 | SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable d… |
CVE-2002-1646 | | | 2002-12-31 | SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication sch… |
CVE-2002-1645 | | | 2002-11-25 | Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a lo… |
CVE-2002-1644 | | | 2002-11-25 | SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child p… |
CVE-2001-0572 | | | 2001-08-22 | The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the foll… |
CVE-2001-0553 | | | 2001-08-14 | SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accoun… |
CVE-2001-0471 | | | 2001-06-27 | SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts w… |
CVE-2001-0364 | | | 2001-06-27 | SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections. |
CVE-2001-0361 | | | 2001-06-27 | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allo… |
CVE-2001-0259 | | | 2001-06-02 | ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker c… |
CVE-2001-0144 | | | 2001-03-12 | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. |
CVE-2001-1476 | | | 2001-01-18 | SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords… |
CVE-2001-1475 | | | 2001-01-18 | SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated. |
CVE-2001-1474 | | | 2001-01-18 | SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by… |
CVE-2001-1473 | | | 2001-01-18 | The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session I… |
CVE-2001-1470 | | | 2001-01-18 | The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block wi… |
CVE-2001-1469 | | | 2001-01-18 | The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CR… |
CVE-2000-0992 | | | 2000-12-19 | Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. |
CVE-2000-0575 | | | 2000-07-05 | SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, whic… |
CVE-2000-0217 | | | 2000-02-24 | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program. |
CVE-2000-0143 | | | 2000-02-11 | The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password data… |
CVE-1999-0787 | | | 1999-09-17 | The SSH authentication agent follows symlinks via a UNIX domain socket. |
CVE-1999-1231 | | | 1999-06-09 | ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name… |
CVE-1999-1029 | | | 1999-05-13 | SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote atta… |
CVE-1999-0398 | | | 1999-01-01 | In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login. |
CVE-1999-0248 | | | 1999-01-01 | A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. |
CVE-1999-1159 | | | 1998-12-29 | SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root. |
CVE-1999-0310 | | | 1998-09-01 | SSH 1.2.25 on HP-UX allows access to new user accounts. |
CVE-1999-1085 | | | 1998-06-12 | SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert a… |
CVE-1999-0013 | High | 8.4 | 1998-01-22 | Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user. |