CVE-2001-1474

Published: Jan 18, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.

Affected (8)

Products: Ssh: Ssh

Ssh

1 product

Ssh

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ssh Ssh	Version 1.2.24
Ssh Ssh	Version 1.2.25
Ssh Ssh	Version 1.2.26
Ssh Ssh	Version 1.2.27
Ssh Ssh	Version 1.2.28
Ssh Ssh	Version 1.2.29
Ssh Ssh	Version 1.2.30
Ssh Ssh	Version 1.2.31

References (4)

http://www.kb.cert.org/vuls/id/786900

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/6604

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/786900

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/6604

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.