high7.2Public exploit code
CVE-2001-0553
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accoun…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SSH2 3.0 - Short Password Login2001-07-21 · remote · unix · Verified
Impact
SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ssh | Secure Shell | Version 3.0.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html
- http://www.ciac.org/ciac/bulletins/l-121.shtml
- http://www.kb.cert.org/vuls/id/737451
- http://www.osvdb.org/586
- http://www.securityfocus.com/bid/3078
- http://www.ssh.com/products/ssh/exploit.cfm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6868
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0486.html
- http://www.ciac.org/ciac/bulletins/l-121.shtml
- http://www.kb.cert.org/vuls/id/737451
- http://www.osvdb.org/586
- http://www.securityfocus.com/bid/3078
- http://www.ssh.com/products/ssh/exploit.cfm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6868