Unscored severity · published Sep 17, 1999
CVE-1999-0787
The SSH authentication agent follows symlinks via a UNIX domain socket
–
CVSS
1%
EPSS
No
On KEV
Description
The SSH authentication agent follows symlinks via a UNIX domain socket.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
Ssh · Ssh
1.2.27 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0787
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0787
marc.info
http://marc.info/?l=bugtraq&m=93760201002154&w=2
marc.info
http://marc.info/?l=bugtraq&m=93832856804415&w=2
www.securityfocus.com
http://www.securityfocus.com/bid/660
More from Ssh
8.4
CVE-1999-0013
Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user
5.9
CVE-2023-48795
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…
–
CVE-2011-0766
The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on…
–
CVE-2002-1715
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then…
–
CVE-2001-0572
The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information…