CVSS: 7.5EPSS: 2%CPEs: 1EXPL: 0CVE-2001-1380
https://notcve.org/view.php?id=CVE-2001-1380
OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431 http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01 http://marc.info/?l=bugtraq&m=100154541809940&w=2 http://rhn.redhat.com/errata/RHSA-2001-114.html http://www.ciac.org/ciac/bulletins/m-010.shtml http://www.kb.cert.org/vuls/id/905795 http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-081.php http://www.osvdb.org/642 http://www.securityfocus.com/bid/3369 https: •
CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0CVE-2001-1382
https://notcve.org/view.php?id=CVE-2001-1382
The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used. • http://www.openwall.com/Owl/CHANGES-stable.shtml http://www.osvdb.org/5408 •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 2CVE-2001-0529
https://notcve.org/view.php?id=CVE-2001-0529
OpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any file named 'cookies' via a symlink attack. • ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2001-010.txt.asc http://archives.neohapsis.com/archives/bugtraq/2001-05/0322.html http://archives.neohapsis.com/archives/bugtraq/2001-06/0007.html http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431 http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01 http://online.securityfocus.com/archive/1/188737 http://www.calderasystems.com/support/security/advisories/CSSA-2001-023.0.txt http://www.k •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2001-1459
https://notcve.org/view.php?id=CVE-2001-1459
OpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if commands are executed with no pty, which allows local users to bypass resource limits (rlimits) set in pam.d. • http://marc.info/?l=bugtraq&m=99324968918628&w=2 http://www.kb.cert.org/vuls/id/797027 http://www.securityfocus.com/bid/2917 https://exchange.xforce.ibmcloud.com/vulnerabilities/6757 •
CVSS: 10.0EPSS: 12%CPEs: 13EXPL: 3CVE-2001-0144 – SSH (x2) - Remote Command Execution
https://notcve.org/view.php?id=CVE-2001-0144
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. • https://www.exploit-db.com/exploits/349 https://www.exploit-db.com/exploits/20617 http://marc.info/?l=bugtraq&m=98168366406903&w=2 http://razor.bindview.com/publish/advisories/adv_ssh1crc.html http://www.cert.org/advisories/CA-2001-35.html http://www.osvdb.org/503 http://www.osvdb.org/795 http://www.securityfocus.com/bid/2347 https://exchange.xforce.ibmcloud.com/vulnerabilities/6083 •