Vulnerabilities > SSH > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-12-04 | CVE-2012-5975 | Improper Authentication vulnerability in SSH Tectia Server The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a crafted session involving entry of blank passwords, as demonstrated by a root login session from a modified OpenSSH client with an added input_userauth_passwd_changereq call in sshconnect2.c. | 9.3 |
| 2002-11-25 | CVE-2002-1645 | Buffer Overflow vulnerability in SSH Communications Secure Shell Windows Client URL Catcher Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL. | 10.0 |
| 2001-03-12 | CVE-2001-0144 | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow. | 10.0 |
| 1999-01-01 | CVE-1999-0248 | Unspecified vulnerability in SSH 1.2.27 A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials. | 10.0 |