CVE-2001-1469

Published: Jan 18, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.

Affected (8)

Products: Ssh: Ssh

Ssh

1 product

Ssh

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ssh Ssh	Version 1.2.24
Ssh Ssh	Version 1.2.25
Ssh Ssh	Version 1.2.26
Ssh Ssh	Version 1.2.27
Ssh Ssh	Version 1.2.28
Ssh Ssh	Version 1.2.29
Ssh Ssh	Version 1.2.30
Ssh Ssh	Version 1.2.31

References (4)

http://www.kb.cert.org/vuls/id/25309

Source: cve@mitre.org

ExploitUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/6449

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/25309

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/6449

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.