CVE-1999-1085: ssh secure_shell
Vulnerability summary
CVE-1999-1085 is a medium (CVSS 5.0) vulnerability in ssh secure_shell. EPSS estimates a 3.50% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.
Timeline
- 09-03-2002PublishedVulnerability first disclosed.
- 01-08-2024Last modifiedVulnerability information updated.
Description
SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.50%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
+0.29 pp
From 3.21% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ssh1 product
- secure_shell1.2.23 | 1.2.25
1 vendor · 1 product