CVE-2001-0144

2001-05-0704:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0144

core sdi ssh1

crc-32 compensation attack

remote attacks

integer overflow

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

High

0.122 Low

EPSS

Percentile

95.4%

JSON

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Affected configurations

NVD

Node

openbsdopensshMatch1.2.2

openbsdopensshMatch1.2.3

openbsdopensshMatch2.1

openbsdopensshMatch2.1.1

openbsdopensshMatch2.2

sshsshMatch1.2.24

sshsshMatch1.2.25

sshsshMatch1.2.26

sshsshMatch1.2.27

sshsshMatch1.2.28

sshsshMatch1.2.29

sshsshMatch1.2.30

sshsshMatch1.2.31

CPENameOperatorVersion
openbsd:opensshopenbsd openssheq1.2.2
openbsd:opensshopenbsd openssheq1.2.3
openbsd:opensshopenbsd openssheq2.1
openbsd:opensshopenbsd openssheq2.1.1
openbsd:opensshopenbsd openssheq2.2
ssh:sshssheq1.2.24
ssh:sshssheq1.2.25
ssh:sshssheq1.2.26
ssh:sshssheq1.2.27
ssh:sshssheq1.2.28

CPE	Name	Operator	Version
openbsd:openssh	openbsd openssh	eq	1.2.2
openbsd:openssh	openbsd openssh	eq	1.2.3
openbsd:openssh	openbsd openssh	eq	2.1
openbsd:openssh	openbsd openssh	eq	2.1.1
openbsd:openssh	openbsd openssh	eq	2.2
ssh:ssh	ssh	eq	1.2.24
ssh:ssh	ssh	eq	1.2.25
ssh:ssh	ssh	eq	1.2.26
ssh:ssh	ssh	eq	1.2.27
ssh:ssh	ssh	eq	1.2.28