CVE-2001-0572

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-03/0225.htmlExploit, Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000391Vendor Advisory
http://www.kb.cert.org/vuls/id/596827US Government Resource
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-033.php3Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2001-033.htmlPatch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-03/0225.htmlExploit, Patch, Vendor Advisory
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000391Vendor Advisory
http://www.kb.cert.org/vuls/id/596827US Government Resource
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-033.php3Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2001-033.htmlPatch, Vendor Advisory

Timeline

Published: Aug 22, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-05734.6lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain CVE-2001-05745.0Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in CVE-2001-05754.6Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpsh CVE-2001-05764.6lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attac CVE-2001-05777.2recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first CVE-2001-05784.6Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to CVE-2001-05797.5lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument CVE-2001-05805.0Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending CVE-2001-05815.0Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387 CVE-2001-05824.6Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations CVE-2001-05835.0Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET CVE-2001-05842.1IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE c