NVD

Id
75735  
Name
CVE-1999-1085  
Description
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-05  
Published
1998-06-12  
Modified Date
2016-10-17  
Seq
1999-1085  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
384163 75735 CVE-1999-1085 19980612 CORE-SDI-04: SSH insertion attack  View
384164 75735 CVE-1999-1085 19980703 UPDATE: SSH insertion attack  View
384165 75735 CVE-1999-1085 ssh-insert(1126)  View
384166 75735 CVE-1999-1085 VU#13877  View

Related JVN