CVE:CVE-2001-0572
CNNVD:CNNVD-200108-127
OpenSSH和其他包上生效的SSH协议1和2(也称为SSH-2)具有许多缺陷。远程攻击者可以借助嗅探：(1)密码长度或长度范围简化蛮力密码猜测，（2）RSA或DSA认证是否被使用，（3）RSA认证的authorized_keys数目或（4）shell命令的长度获得下列信息。
solution:Upgrade openbsd openssh to a higher version than 4.5,and avoid the version 4.5; Upgrade ssh ssh to a higher version than 1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,and avoid the version 1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31