Unscored CVE-2001-0361 EUVD-2001-0360GHSA-gf79-xhc9-6fmw

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain …

Published Sep 18, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.

References

2344 vdb-entry
2116 vdb-entry
DSA-027 vendor-advisory
DSA-023 vendor-advisory
ssh-session-key-recovery(6082) vdb-entry
L-047 third-party-advisory government-resource
DSA-086 vendor-advisory
20010207 [CORE SDI ADVISORY] SSH1 session key recovery vulnerability mailing-list
SuSE-SA:2001:04 vendor-advisory