SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
2001-01-18T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ssh | ssh | 1.2.24 | Yes |
| Application | ssh | ssh | 1.2.25 | Yes |
| Application | ssh | ssh | 1.2.26 | Yes |
| Application | ssh | ssh | 1.2.27 | Yes |
| Application | ssh | ssh | 1.2.28 | Yes |
| Application | ssh | ssh | 1.2.29 | Yes |
| Application | ssh | ssh | 1.2.30 | Yes |
| Application | ssh | ssh | 1.2.31 | Yes |