NetSight
IP …
critical10.0Public exploit code

CVE-2001-0144

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Affected products

VendorProductAffected versions
OpenbsdOpenssh
Versions 1.2.2, 1.2.3, 2.1, 2.1.1, 2.2
SshSsh
Versions 1.2.24, 1.2.25, 1.2.26, 1.2.27, 1.2.28, 1.2.29

References