SSH Communications Security Information for VU#565052
Passwords sent via SSH encrypted with RC4 can be easily cracked
- Vendor Information Help Date Notified:
- Statement Date:
- Date Updated: 06 Feb 2001
RC4 was disabled from SSH Corp.'s distribution in 1997.
The vendor has not provided us with any further information regarding this vulnerability.
RC4 encryption was disabled in SSH a long time ago. Current versions of SSH do not suffer from this problem since they disallow the use of this algorithm.
If you have feedback, comments, or additional information about this vulnerability, please send us email.