CVEvulnerability

CVE-2001-0361

4.0 MEDIUM Published 2001-06-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-06-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:N
Weaknesses
CWE-310

Description

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.

Affected configurations

• openbsd openssh 1.2.3 • openbsd openssh 2.1 • openbsd openssh 2.1.1 • ssh ssh (<= 1.2.31)

Related

Weakness · not in database (1)

References