NVD

Id
79016  
Name
CVE-2001-1585  
Description
SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user"s authorized_keys file.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2001-12-31  
Modified Date
2010-06-24  
Seq
2001-1585  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394397 79016 CVE-2001-1585 20010208 Authentication By-Pass Vulnerability in OpenSSH-2.3.1 (devel snapshot)  View
394398 79016 CVE-2001-1585 2356  View
394399 79016 CVE-2001-1585 http://www.openbsd.org/advisories/ssh_bypass.txt  View
394400 79016 CVE-2001-1585 openssh-bypass-authentication(6084)  View

Related JVN