CVE-2001-1474

N/A

Description

SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.

CVE Details

CVSS v3.1 ScoreN/A

Published1/18/2001

Last Modified4/3/2025

Sourcenvd

Honeypot Sightings0

Affected Products

ssh:ssh

References

http://www.kb.cert.org/vuls/id/786900(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/6604(cve@mitre.org)

http://www.kb.cert.org/vuls/id/786900(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/6604(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.