CVE:CVE-2001-1475
CNNVD:CNNVD-200101-124
SSH 2.0版本在使用RC4和密码认证时存在漏洞。远程攻击者直到新服务器密钥(VK)生成才重放消息。
solution:Upgrade ssh ssh to a higher version than 1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31,and avoid the version 1.2.24,1.2.25,1.2.26,1.2.27,1.2.28,1.2.29,1.2.30,1.2.31