Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-1999-0013 Details

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

CVSS 3.x Severity and Vector Strings:

CNA: CISA-ADPCVSS-B:8.4 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013	CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0013	[email protected]

CWE-ID	CWE Name	Source
NVD-CWE-Other	Weakness Not in a Standard CWE Category	[email protected]
CWE-522	Insufficiently Protected Credentials	CISA-ADP

Product	Versions
ssh ssh	1.2.0 1.2.1 1.2.2 1.2.3 1.2.4
CPE cpe:2.3:a:ssh:ssh:1.2.0:::::::* cpe:2.3:a:ssh:ssh:1.2.1:::::::* cpe:2.3:a:ssh:ssh:1.2.2:::::::* cpe:2.3:a:ssh:ssh:1.2.3:::::::* cpe:2.3:a:ssh:ssh:1.2.4:::::::* cpe:2.3:a:ssh:ssh:1.2.5:::::::* cpe:2.3:a:ssh:ssh:1.2.6:::::::* cpe:2.3:a:ssh:ssh:1.2.7:::::::* cpe:2.3:a:ssh:ssh:1.2.8:::::::* cpe:2.3:a:ssh:ssh:1.2.9:::::::* cpe:2.3:a:ssh:ssh:1.2.10:::::::* cpe:2.3:a:ssh:ssh:1.2.11:::::::* cpe:2.3:a:ssh:ssh:1.2.12:::::::* cpe:2.3:a:ssh:ssh:1.2.13:::::::* cpe:2.3:a:ssh:ssh:1.2.14:::::::* Remediation No remediation found in references.

Product

Versions

ssh ssh

1.2.0

1.2.1

1.2.2

1.2.3

1.2.4

8 change records found show changes

QUICK INFO