SSH Communications Security Information for VU#565052

Passwords sent via SSH encrypted with RC4 can be easily cracked



Vendor Statement

RC4 was disabled from SSH Corp.'s distribution in 1997.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Vendor References



RC4 encryption was disabled in SSH a long time ago. Current versions of SSH do not suffer from this problem since they disallow the use of this algorithm.

If you have feedback, comments, or additional information about this vulnerability, please send us email.