VDB

GCVE-110-CERTCC-2000-684820

GCVE-110-CERTCC-2000-684820
Advisory Published
Vulnetix · Advisory published January 18, 2001
A design flaw in the SSH-1 protocol allows a malicious server to establish two concurrent sessions with the same session ID, allowing a man-in-the-middle attack. The client must accept unknown host keys from the malicious server to enable exploitation of this vulnerability.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact13population9exploitation0widely_known1score_current1.1583ease_of_exploitation4

References

SSH-1 allows client authentication to be forwarded by a malicious server to another server
url
SSH-1 allows client authentication to be forwarded by a malicious server to another server
url
SSH-1 allows client authentication to be forwarded by a malicious server to another server
advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›