CVEvulnerability
CVE-1999-0248
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 1999-01-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Affected configurations
• ssh ssh 1.2.27
References
- http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html oliver.efri.hr
- http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1 www.uni-karlsruhe.de
- http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html oliver.efri.hr
- http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1 www.uni-karlsruhe.de