VULNERABILITY INTELLIGENCE

CVE-2001-0361

CVSS score4 MEDIUM
EPSS probability2.50%
CISA KEVNot currently listed
Published2001-06-27
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:N

Description

Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.

Primary references