CVE-2001-0553
First published: Tue Aug 14 2001(Updated: )
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SSH (Secure Shell) | =3.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html
- http://www.ssh.com/products/ssh/exploit.cfm
- http://www.kb.cert.org/vuls/id/737451
- http://www.ciac.org/ciac/bulletins/l-121.shtml
- http://www.securityfocus.com/bid/3078
- http://www.osvdb.org/586
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6868
Frequently Asked Questions
What is the severity of CVE-2001-0553?
CVE-2001-0553 is classified as a medium severity vulnerability due to its potential to allow unauthorized local access.
How do I fix CVE-2001-0553?
To mitigate CVE-2001-0553, upgrade SSH Secure Shell to a version later than 3.0.0 that properly implements password authentication.
Who is affected by CVE-2001-0553?
CVE-2001-0553 affects systems running SSH Secure Shell version 3.0.0 on Unix platforms.
What are the risks associated with CVE-2001-0553?
The main risk with CVE-2001-0553 is the possibility that local users may access locked accounts with weak password fields.
Is CVE-2001-0553 a known exploit?
Yes, CVE-2001-0553 has been documented and is recognized as a vulnerability that can be exploited under specific conditions.
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/references
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- vendor/ssh
- product/secure shell
- canonical/ssh secure shell
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/ssh (secure shell)
- version/ssh (secure shell)/3.0.0