CVE-2001-1507

OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-12-31

Last modified

2024-08-08

Affected products

• Openssh (Openbsd)

References

• http://msgs.securepoint.com/cgi-bin/get/bugtraq0111/114.html
• http://www.iss.net/security_center/static/7598.php
• http://www.openbsd.org/errata30.html#sshd
• http://www.securityfocus.com/bid/3560