CVE-2001-0572 - CVE House
Back to Database
Status published High CVE-2001-0572

The SSH protocols 1 and 2 (aka SSH-2) as implemented...

Vulnerability Description

The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-0572

Credits & Attribution

No credits recorded in the NVD database.

References

More from openbsd

View All →
CVE-2022-48437
An issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1,...
Unknown 0
CVE-2022-27882
slaacd in OpenBSD 6.9 and 7.0 before 2022-03-22 has an...
High 7.5
CVE-2022-27881
engine.c in slaacd in OpenBSD 6.9 and 7.0 before 2022-02-21...
High 7.5
CVE-2021-46880
x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata...
Unknown 0
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain...
High 7

Affected Vendor

Affected Software

openssh, ssh
Vulnerable Versions:
4.5, 1.2.24, 1.2.25, 1.2.26, 1.2.27, 1.2.28, 1.2.29, 1.2.30, 1.2.31

Timeline

Official Publish: July 27th, 2001
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.