SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2007-10-06T21:00:00
Updated: 2017-07-28T12:57:01
Reserved: 2007-10-06T00:00:00
Link: CVE-2001-1585
JSON object: View
NVD Information
Status : Modified
Published: 2001-12-31T05:00:00.000
Modified: 2017-07-29T01:29:00.593
Link: CVE-2001-1585
JSON object: View
Redhat Information
No data.
CWE