CVE-1999-0013

Published: Jan 22, 1998Modified: Apr 16, 2026

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.5 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

Affected (15)

Products: Ssh: Ssh

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ssh Ssh	Version 1.2.0
Ssh Ssh	Version 1.2.10
Ssh Ssh	Version 1.2.11
Ssh Ssh	Version 1.2.12
Ssh Ssh	Version 1.2.13
Ssh Ssh	Version 1.2.14
Ssh Ssh	Version 1.2.1
Ssh Ssh	Version 1.2.2
Ssh Ssh	Version 1.2.3
Ssh Ssh	Version 1.2.4
Ssh Ssh	Version 1.2.5
Ssh Ssh	Version 1.2.6
Ssh Ssh	Version 1.2.7
Ssh Ssh	Version 1.2.8
Ssh Ssh	Version 1.2.9

Related CWEs

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.