CVE-1999-0013

HighCVSS 8.4

Published: 22/01/1998(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.09%

61th percentile - higher than 61% of all known CVEs

Summary

CVE-1999-0013 vulnerability involves stolen credentials from SSH clients via the ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

Risk Assessment

Organizations may be exposed to unauthorized access to remote systems, potentially leading to data loss or security breaches.

Recommendation

It is recommended to restrict access to the ssh-agent program and to regularly monitor and audit the use of SSH credentials.

Other vulnerabilities in ssh-agent

CVE-2025-47914Medium
SSH Agent servers do not validate message size when processing new identity requests. A malformed message may cause an out-of-bounds read and panic the program.

Original NVD description (English source)

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS