积极预防 及时发现
快速响应 力保恢复
The SSH version 1.5协议允许远程攻击者通过对PKCS#1 version 1.5上...
发布时间:2001-06-27 信息来源:管理员

CNCVE编号:CNCVE-20010361 CVE编号:CVE-2001-0361 安全级别:中 漏洞中文描述: The SSH version 1.5协议允许远程攻击者通过对PKCS#1 version 1.5上的名为“Bleichenbacher attack”的攻击来解密和/或改变通信量。 OpenSSH最新版本2.3.0、 AppGate和SSH Communications Security ssh-1最新版本1.2 漏洞英文描述: The SSH version 1.5 protocol allows a remote attacker to decrypt and/or alter traffic via an attack on PKCS#1 version 1.5 knows as a "Bleichenbacher attack". OpenSSH up to version 2.3.0, AppGate, and SSH Communications Security ssh-1 up to version 1.2. 漏洞参考: Reference: BUGTRAQ:20010207 CORE-20010116: SSH protocol 1.5 session key recovery Reference: URL:http://www.core-sdi.com/advisories/ssh1_sessionkey_recovery.htm Reference: BID:2344 Reference: URL:http://www.securityfocus.com/bid/2344 系统类型:其他 漏洞类型:设计错误