Vulnerabilities (CVE)

Filtered by vendor Ssh Subscribe
Filtered by product Ssh
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0217 2 Openbsd, Ssh 3 Openssh, Ssh, Ssh2 2025-04-03 5.1 MEDIUM N/A
The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
CVE-2001-1475 1 Ssh 1 Ssh 2025-04-03 7.5 HIGH N/A
SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.
CVE-2001-1470 1 Ssh 1 Ssh 2025-04-03 5.0 MEDIUM N/A
The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by changing its cyclic redundancy check (CRC) to match the modifications to the message.