CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 3CVE-2001-0471 – SSH 1.2.30 - Daemon Logging Failure
https://notcve.org/view.php?id=CVE-2001-0471
SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack. • https://www.exploit-db.com/exploits/20615 http://www.securityfocus.com/archive/1/160648 http://www.securityfocus.com/bid/2345 •
CVSS: 3.6EPSS: 0%CPEs: 4EXPL: 4CVE-2001-0259 – SSH 1.2.x - Secure-RPC Weak Encrypted Authentication
https://notcve.org/view.php?id=CVE-2001-0259
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file. • https://www.exploit-db.com/exploits/20560 http://archives.neohapsis.com/archives/bugtraq/2001-01/0262.html http://www.securityfocus.com/bid/2222 http://www.ssh.com/products/ssh/patches/secureRPCvulnerability.html https://exchange.xforce.ibmcloud.com/vulnerabilities/5963 •
CVSS: 10.0EPSS: 12%CPEs: 13EXPL: 3CVE-2001-0144 – SSH (x2) - Remote Command Execution
https://notcve.org/view.php?id=CVE-2001-0144
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. • https://www.exploit-db.com/exploits/349 https://www.exploit-db.com/exploits/20617 http://marc.info/?l=bugtraq&m=98168366406903&w=2 http://razor.bindview.com/publish/advisories/adv_ssh1crc.html http://www.cert.org/advisories/CA-2001-35.html http://www.osvdb.org/503 http://www.osvdb.org/795 http://www.securityfocus.com/bid/2347 https://exchange.xforce.ibmcloud.com/vulnerabilities/6083 •
CVSS: 5.0EPSS: 0%CPEs: 8EXPL: 0CVE-2001-1474
https://notcve.org/view.php?id=CVE-2001-1474
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache. • http://www.kb.cert.org/vuls/id/786900 https://exchange.xforce.ibmcloud.com/vulnerabilities/6604 •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2001-1473
https://notcve.org/view.php?id=CVE-2001-1473
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target. • http://www.kb.cert.org/vuls/id/684820 https://exchange.xforce.ibmcloud.com/vulnerabilities/6603 • CWE-310: Cryptographic Issues •