Description
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
References
- ssh-rc4-replay-conversation(6490) vdb-entry
- VU#665372 third-party-advisory
Published Apr 21, 2005 · Updated Aug 8, 2024 · Assigned by mitre
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.