CVE-2001-1469: Medium severity SSH ssh vulnerability
The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1469?
CVE-2001-1469 is considered a critical vulnerability due to its ability to allow remote message modification without detection.
How do I fix CVE-2001-1469?
To fix CVE-2001-1469, upgrade to a version of SSH that is not affected by this vulnerability, specifically versions later than 1.2.31.
What versions of SSH are affected by CVE-2001-1469?
CVE-2001-1469 affects SSH versions 1.2.24 through 1.2.31.
What type of attack does CVE-2001-1469 facilitate?
CVE-2001-1469 facilitates message modification attacks by exploiting the RC4 stream cipher in SSH1.
Is CVE-2001-1469 present in SSH2?
CVE-2001-1469 specifically affects SSH1 and is not present in SSH2 implementations.