CVE-1999-1010

Low

Published: 14/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.42%

69th percentile — higher than 69% of all known CVEs

SSH server version 1.2.27 allows a client to use the 'none' cipher, even if it is not permitted by the server policy.

This may lead to unauthorized access to data, as the lack of encryption exposes communication to eavesdropping.

It is recommended to upgrade the SSH server to a newer version that does not allow the use of the 'none' cipher.

Original NVD description (English source)

An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.