Rapid7 Vulnerability & Exploit Database

F5 Networks: K17448 (CVE-2001-1473): OpenSSH vulnerability CVE-2001-1473

Back to Search

F5 Networks: K17448 (CVE-2001-1473): OpenSSH vulnerability CVE-2001-1473

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
01/18/2001
Created
07/25/2018
Added
02/16/2017
Modified
10/13/2017

Description

The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.

Solution(s)

  • f5-big-ip-upgrade-latest

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;