CVE-1999-0248
HighExploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Risk Assessment
An attacker could gain access to sensitive user data, potentially leading to unauthorized access to the organization's systems and resources.
Recommendation
It is recommended to upgrade to a newer version of sshd to eliminate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in sshd 1.2.17
See all- CVE-2000-0992Medium
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
- CVE-2000-0143Medium
The SSH protocol server (sshd) allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Original NVD description (English source)
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS