CVEvulnerability

CVE-2001-1382

5.0 MEDIUM Published 2001-09-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-09-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

Affected configurations

• openbsd openssh (<= 2.9.9p2)

References