Lucene search
HistoryApr 21, 2005 - 4:00 a.m.
CVE-2001-1469
cve-2001-1469
information security
ssh1 vulnerability
rc4 stream cipher
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.5%
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message’s cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.
Affected configurations
Node
sshsshMatch1.2.24
ORsshsshMatch1.2.25
ORsshsshMatch1.2.26
ORsshsshMatch1.2.27
ORsshsshMatch1.2.28
ORsshsshMatch1.2.29
ORsshsshMatch1.2.30
ORsshsshMatch1.2.31
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.5%
Related for CVE-2001-1469