VULNERABILITY INTELLIGENCE
CVE-2001-1474
CVSS score5 MEDIUM
EPSS probability1.17%
CISA KEVNot currently listed
Published2001-01-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the client's DNS cache.
Primary references
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108