CVE ID:	CVE-2001-0361
Description:	Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker to decrypt and/or alter traffic via a "Bleichenbacher attack" on PKCS#1 version 1.5.
Test IDs:	1.3.6.1.4.1.25623.1.0.53786   1.3.6.1.4.1.25623.1.0.11342   1.3.6.1.4.1.25623.1.0.53766
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2001-0361 BugTraq ID: 2344 http://www.securityfocus.com/bid/2344 Bugtraq: 20010207 [CORE SDI ADVISORY] SSH1 session key recovery vulnerability (Google Search) http://marc.info/?l=bugtraq&m=98158450021686&w=2 Computer Incident Advisory Center Bulletin: L-047 http://www.ciac.org/ciac/bulletins/l-047.shtml Cisco Security Advisory: 20010627 Multiple SSH Vulnerabilities Debian Security Information: DSA-023 (Google Search) http://www.debian.org/security/2001/dsa-023 Debian Security Information: DSA-027 (Google Search) http://www.debian.org/security/2001/dsa-027 Debian Security Information: DSA-086 (Google Search) http://www.debian.org/security/2001/dsa-086 FreeBSD Security Advisory: FreeBSD-SA-01:24 ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-01:24.ssh.asc http://www.osvdb.org/2116 SuSE Security Announcement: SuSE-SA:2001:04 (Google Search) http://www.novell.com/linux/security/advisories/adv004_ssh.html XForce ISS Database: ssh-session-key-recovery(6082) https://exchange.xforce.ibmcloud.com/vulnerabilities/6082