Every CVESearch/Get API key

CVE-2001-0144

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary...

10.0 HighPublic exploit

CVE-2001-0144 is a high vulnerability (CVSS 10.0) in Ssh, published March 12, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 32.4%, the 98th percentile. No source names a fixed version.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
32.4%EPSS, 98th percentile
Exploitation
None known2 public exploits
Fixed in
No fix listedNo source names one

Description

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Exploit likelihood

32.4%Up 25.2 points since Feb 4, 2022
90%50%10%1%

Discussion

Quiet in the last day.
14 days ago: 0 people13 days ago: 0 people12 days ago: 0 people11 days ago: 0 people10 days ago: 0 people9 days ago: 0 people8 days ago: 0 people7 days ago: 0 people6 days ago: 0 people5 days ago: 0 people4 days ago: 0 people3 days ago: 0 people2 days ago: 1 person1 day ago: 0 peopleLast 24 hours: 0 people

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSSH 1.2.x - CRC-32 Compensation Attack Detector2001-02-08
Exploit-DBSSH (x2) - Remote Command Execution2002-05-01

What each source reports

NVD Score used10.0

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Record
CVE-2001-0144
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE ListNo score

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Record
CVE-2001-0144
Updated
2026-11-02
EUVDEUVD-2001-0144No score

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Record
EUVD-2001-0144
Updated
2026-11-03
GitHub AdvisoriesGHSA-xrvw-f7p8-2hqmNo score

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary...

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Record
GHSA-xrvw-f7p8-2hqm
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open