Every CVESearch/Get API key

CVE-1999-0398

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired...

4.6 Medium

CVE-1999-0398 is a medium vulnerability (CVSS 4.6) in Ssh, published January 1, 1999. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. No source names a fixed version.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
0.39%EPSS, 33rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

Exploit likelihood

0.39%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used4.6

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

Record
CVE-1999-0398
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

Record
CVE-1999-0398
Updated
2026-11-02
EUVDEUVD-1999-0398No score

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

Record
EUVD-1999-0398
Updated
2026-11-03
GitHub AdvisoriesGHSA-4q8w-3rhr-5qw7No score

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired...

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

Record
GHSA-4q8w-3rhr-5qw7
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open