VDB

GCVE-110-CERTCC-2000-565052

GCVE-110-CERTCC-2000-565052
Advisory Published
Vulnetix · Advisory published January 18, 2001
Passwords sent using SSH with RC4 encryption can be easily cracked by an attacker who is able to capture and replay the session. This problem occurs for three reasons: SSH sessions can be replayed, the RC4 encryption algorithm has some specific weaknesses, and the SSH daemon provides too much information during the authentication phase of the protocol.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact17population9exploitation0widely_known13score_current3.213ease_of_exploitation4

References

Passwords sent via SSH encrypted with RC4 can be easily cracked
advisory
Passwords sent via SSH encrypted with RC4 can be easily cracked
url
Passwords sent via SSH encrypted with RC4 can be easily cracked
url

Browse GCVE Records

72,409 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›