Every CVE Search/ Get API key

CVE-2000-0575

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is...

7.2 High

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Exploit likelihood

0.84%Down 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.2

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Record
CVE-2000-0575
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Record
CVE-2000-0575
Updated
2026-11-02
EUVDEUVD-2000-0571 No score

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Record
EUVD-2000-0571
Updated
2026-11-03
GitHub AdvisoriesGHSA-fwxc-qvhc-7v9m No score

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is...

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Record
GHSA-fwxc-qvhc-7v9m
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2000-0575 is a high vulnerability (CVSS 7.2) in Ssh, published July 5, 2000. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.84%, the 57th percentile. No source names a fixed version.

References

MoveEnter Open