CVE-2001-0259: Low severity SSH ssh vulnerability
ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt that user's private key file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0259?
CVE-2001-0259 is considered to be a moderate severity vulnerability due to its potential to allow local attackers to recover sensitive information.
How do I fix CVE-2001-0259?
To fix CVE-2001-0259, upgrade to a version of SSH that is not affected, specifically versions later than 1.2.30.
Who is impacted by CVE-2001-0259?
CVE-2001-0259 impacts users of SSH versions 1.2.27 through 1.2.30 that utilize Secure-RPC.
What type of attacks can exploit CVE-2001-0259?
CVE-2001-0259 can be exploited by local attackers who gain access to the machine to recover the SUN-DES-1 magic phrase.
Does CVE-2001-0259 affect SSH key management?
Yes, CVE-2001-0259 directly affects SSH key management by potentially allowing unauthorized access to users' private keys.