Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-1999-0248

Overview
Vulnerability Score	10.0
CVE Id	CVE-1999-0248
Last Modified	05 Sep 2008 04:16:49
Published	01 Jan 1999 12:00:00
Confidentiality Impact	COMPLETE
Integrity Impact	COMPLETE
Availability Impact	COMPLETE
Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE

CVE-1999-0248

Summary

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

Vulnerable Systems

Application

• Ssh 1.2.27

References

CONFIRM - http://www.uni-karlsruhe.de/~ig25/ssh-faq/ssh-faq-6.html#ss6.1

MISC - http://oliver.efri.hr/~crv/security/bugs/mUNIXes/ssh2.html