CVE-1999-1085
MediumExploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
SSH versions 1.2.25, 1.2.23, and others, when used in CBC or CFB modes, allow remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet.
Risk Assessment
Attackers can manipulate data transmitted between the client and server, potentially leading to serious security breaches and loss of data integrity.
Recommendation
It is recommended to upgrade to the latest version of SSH that is not vulnerable to this type of attack and to implement additional security measures such as monitoring network traffic.
Original NVD description (English source)
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."