QwikSec

Security Database

CVE

CWE

Training

CVE-2001-0553

Published: Jun 25, 2002

Modified: Aug 8, 2024

PUBLISHED

Description

SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use "NP" in the password field.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20010720 URGENT SECURITY ADVISORY FOR SSH SECURE SHELL 3.0.0

mailing-list

x_refsource_BUGTRAQ

http://www.ssh.com/products/ssh/exploit.cfm

x_refsource_CONFIRM

ssh-password-length-unauth-access(6868)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_CERT-VN

vdb-entry

x_refsource_OSVDB

third-party-advisory

government-resource

x_refsource_CIAC

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.