Users login

Create an account »


Users login

Home » Hacking News » SSH1 Daemon Logging Failure Vulnerability

SSH1 Daemon Logging Failure Vulnerability

by evilnop on February 9th, 2001 SSH1 is Secure Shell communicate protocol version 1 specified by IETF draft to protect the integrity of traffic over the network. A problem with the implementation of the SSH1 daemon could allow an attacker to by-pass numerous attempts at brute force cracking a system.

The logging routine in the SSH1 code does not capture failed
attempts beyond the fourth attempt. In a brute force attack scenario,
there are numerous successive attempts at logging in as a specific
user. This danger is escalated by the SSH1 package allowing remote
root logins by default.

It is possible for a remote user with malicious intent to launch a brute
force attack against a system and successfully remain unnoticed by
system logging utilities beyond the fourth attempted login. By use of this
method, it is possible for the remote user to gain access to any account,
and potentially the root account. This vulnerability is found by Jose Nazario.

Exploit Safe verision of ssh

Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.


Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »