CVE-2001-0529: openbsd openssh

EPSS trend

Probability

0.62%

Chance of exploitation in the next 30 days

Percentile

49%

Versus all other CVEs

30-day change

0.00 pp

From 0.62% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.62%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (archives.neohapsis.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown

References

11 links

download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-034-01Vendor AdvisoryX Refsource IMMUNIX
exchange.xforce.ibmcloud.com/vulnerabilities/6676VDB EntryX Refsource XF
www.openbsd.org/errata29.htmlVendor AdvisoryX Refsource OPENBSD
archives.neohapsis.com/archives/bugtraq/2001-05/0322.htmlMailing ListX Refsource BUGTRAQExploitVendor Advisory
archives.neohapsis.com/archives/bugtraq/2001-06/0007.htmlMailing ListX Refsource BUGTRAQVendor Advisory
online.securityfocus.com/archive/1/188737Mailing ListX Refsource BUGTRAQ
www.calderasystems.com/support/security/advisories/CSSA-2001-023.0.txtVendor AdvisoryX Refsource CALDERA
www.kb.cert.org/vuls/id/655259Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/2825VDB EntryX Refsource BIDExploitPatchVendor Advisory
www.osvdb.org/1853VDB EntryX Refsource OSVDB

Show all 11 references

distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000431Vendor AdvisoryX Refsource CONECTIVA

Related vulnerabilities

CVE-2018-15919debianopenssh+83.56%8y ago28-08-2018 08:00Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'CVE-2018-15473alpineopenssh+7598.63%8y ago17-08-2018 00:00OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.CVE-2003-1562debianopenssh+15.57%18y ago04-08-2008 10:00sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.CVE-2003-0693debianopenssh+111.42%23y ago17-09-2003 04:00A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.CVE-2003-0695debianopenssh+13.79%23y ago18-09-2003 04:00Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.CVE-2003-0682debianopenssh+18.79%23y ago18-09-2003 04:00"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.

All vulnerabilities inopenssh

CVE-2001-0529: openbsd openssh

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References