Vulnerabilities (CVE)

Filtered by vendor Ssh Subscribe
Filtered by product Ssh
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0361 2 Openbsd, Ssh 2 Openssh, Ssh 2025-04-03 4.0 MEDIUM N/A
Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.
CVE-2000-0575 1 Ssh 1 Ssh 2025-04-03 7.2 HIGH N/A
SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.
CVE-2001-0259 1 Ssh 1 Ssh 2025-04-03 3.6 LOW N/A
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.