CVE-2001-0553: High severity ssh secure shell vulnerability
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0553?
CVE-2001-0553 is classified as a medium severity vulnerability due to its potential to allow unauthorized local access.
How do I fix CVE-2001-0553?
To mitigate CVE-2001-0553, upgrade SSH Secure Shell to a version later than 3.0.0 that properly implements password authentication.
Who is affected by CVE-2001-0553?
CVE-2001-0553 affects systems running SSH Secure Shell version 3.0.0 on Unix platforms.
What are the risks associated with CVE-2001-0553?
The main risk with CVE-2001-0553 is the possibility that local users may access locked accounts with weak password fields.
Is CVE-2001-0553 a known exploit?
Yes, CVE-2001-0553 has been documented and is recognized as a vulnerability that can be exploited under specific conditions.