CVE-2000-0575: High severity SSH ssh vulnerability

Published Jul 5, 2000

Updated

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Affected Software

1 affected component

SSH ssh=1.2.27

Remediation

Patch Available

http://www.securityfocus.com/bid/1426

Event History

Jul 5, 2000

CVE Published

04:00 AM

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0575?

CVE-2000-0575 is considered a moderate severity vulnerability due to the risk of Kerberos ticket sniffing.

How do I fix CVE-2000-0575?

To fix CVE-2000-0575, upgrade to a newer version of SSH that does not store Kerberos tickets in the current directory.

What software is affected by CVE-2000-0575?

CVE-2000-0575 affects SSH version 1.2.27 with Kerberos authentication support.

Can CVE-2000-0575 be exploited remotely?

Yes, CVE-2000-0575 can be exploited by remote attackers who can sniff the ticket cache stored in an accessible directory.

What conditions increase the risk of CVE-2000-0575?

The risk of CVE-2000-0575 is increased if the user's home directory is located on an NFS filesystem.