CVE-2001-1473
published 2001-01-18CVE-2001-1473: The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
6.27%
92.7th percentile
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ssh | ssh | — | — |
| ssh | ssh | — | — |
| ssh | ssh | — | — |
| ssh | ssh | — | — |
| ssh | ssh | — | — |
| ssh | ssh | — | — |
| ssh | ssh | — | — |
| ssh | ssh | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3pc4-7j85-539h: The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a
ghsa_unreviewed·2022-04-30
CVE-2001-1473 [HIGH] GHSA-3pc4-7j85-539h: The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.
Red Hat
CVE-2001-1473: The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a
vendor_redhat·CVSS 7.5
CVE-2001-1473 [HIGH] CVE-2001-1473: The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.
Statement: This issue affects the version of the openssh as shipped with Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this issue as having low security impact. This issue is not currently planned to be addressed in future openssh updates for Red Hat Enterprise Linux 4. For additional information, refer to the Red Hat Enterprise L
No detection rules found.
Nuclei
Deprecated SSHv1 Protocol Detection
nuclei·CVSS 7.5
CVE-2001-1473 [HIGH] Deprecated SSHv1 Protocol Detection
Deprecated SSHv1 Protocol Detection
SSHv1 is deprecated and has known cryptographic issues.
Template:
id: CVE-2001-1473
info:
name: Deprecated SSHv1 Protocol Detection
author: iamthefrogy
severity: high
description: SSHv1 is deprecated and has known cryptographic issues.
impact: |
SSH protocol version 1 has known cryptographic weaknesses that allow attackers to potentially decrypt traffic, perform man-in-the-middle attacks, or compromise the integrity of SSH sessions.
remediation: Upgrade to SSH 2.4 or later.
reference:
- https://www.kb.cert.org/vuls/id/684820
- https://nvd.nist.gov/vuln/detail/CVE-2001-1473
- http://www.kb.cert.org/vuls/id/684820
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6603
- https://github.com/codine7/jungle
classification:
cvss-metrics: CVSS:2.0/AV:N/
No writeups or analysis indexed.
2001-01-18
Published