Description
The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check (CRC) to match the modifications to the message.
References
- ssh-idea-modify-packets(6472) vdb-entry
- VU#315308 third-party-advisory