CVE-1999-1010
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the...
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
Exploit likelihood
What each source reports
NVD Score used
2.1
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- Record
CVE-1999-1010- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- Record
CVE-1999-1010- Updated
- 2026-11-02
EUVDEUVD-1999-0991 No score
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- Record
EUVD-1999-0991- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wwmx-q2rq-7qgv No score
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the...
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
- Record
GHSA-wwmx-q2rq-7qgv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1010 is a low vulnerability (CVSS 2.1) in Openbsd Openssh, published December 14, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.41%, the 72nd percentile. No source names a fixed version.