AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2001-1476

HIGH · CVSS 7.5 EPSS 1.01%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2001-01-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2001-1476
Severity
HIGH
CVSS
7.5
EPSS
1.01%

Original NVD Description

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user sessions with certain modifications, which trigger different messages depending on whether the guess is correct or not.