Skip to content

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay...

7.5 High

CVE-2001-1475 is a high vulnerability (CVSS 7.5) in Ssh, published January 18, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.54%, the 74th percentile. No source names a fixed version.

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

Exploit likelihood

1.54%Up 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

Record: CVE-2001-1475
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

Record: CVE-2001-1475
Updated: 2026-11-02

EUVDEUVD-2001-1455 No score

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

Record: EUVD-2001-1455
Updated: 2026-11-03

GitHub AdvisoriesGHSA-ffjc-5qhw-2mxv No score

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay...

SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated.

Record: GHSA-ffjc-5qhw-2mxv
Updated: 2026-11-02

Affected products

ssh

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References