Vulnerability Description
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ssh | Ssh | 1.2.24 |
References
- http://www.kb.cert.org/vuls/id/786900Third Party AdvisoryUS Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6604
- http://www.kb.cert.org/vuls/id/786900Third Party AdvisoryUS Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6604
FAQ
What is CVE-2001-1474?
CVE-2001-1474 is a vulnerability with a CVSS score of 5.0 (MEDIUM). SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.
How severe is CVE-2001-1474?
CVE-2001-1474 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-1474?
Check the references section above for vendor advisories and patch information. Affected products include: Ssh Ssh.