Vulnerabilities > SSH > Ssh2 > 2.0.2

DATE CVE VULNERABILITY TITLE RISK
2002-12-31 CVE-2002-1715 Unspecified vulnerability in SSH and Ssh2
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
local
low complexity
ssh
7.2
2000-02-24 CVE-2000-0217 The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program.
network
high complexity
openbsd ssh
5.1
1999-06-09 CVE-1999-1231 Unspecified vulnerability in SSH Ssh2
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
network
low complexity
ssh
5.0
1999-05-13 CVE-1999-1029 Unspecified vulnerability in SSH Ssh2
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
network
low complexity
ssh
7.5