CVE-2001-1380

OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.

Scoring

CVSS base score
0.17
EPSS probability
3.33%
Published
2003-04-02
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs