CVE-2001-0361: Medium severity OpenBSD OpenSSH vulnerability
Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0361?
CVE-2001-0361 is classified as a medium severity vulnerability due to its potential to allow decryption and alteration of SSH traffic.
How do I fix CVE-2001-0361?
To fix CVE-2001-0361, upgrade OpenSSH to version 2.3.1 or newer, or ensure your SSH implementation does not use vulnerable configurations.
What systems are affected by CVE-2001-0361?
CVE-2001-0361 affects OpenSSH versions up to 2.3.0, as well as SSH version 1.5 implementations up to 1.2.31.
Can CVE-2001-0361 be exploited remotely?
Yes, CVE-2001-0361 can be exploited remotely, allowing attackers to decrypt and alter traffic.
What attack method is used in CVE-2001-0361?
CVE-2001-0361 utilizes a Bleichenbacher attack on PKCS#1 version 1.5 to compromise SSH communications.