PUBLISHED DATE: January 22, 1998CVE-1999-0013:
Stolen credentials from SSH...

Description

Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.

Products

• SSH Communications Security SSH daemon 1.2.0
• SSH Communications Security SSH daemon 1.2.10
• SSH Communications Security SSH daemon 1.2.11
• SSH Communications Security SSH daemon 1.2.12
• SSH Communications Security SSH daemon 1.2.13
• SSH Communications Security SSH daemon 1.2.14
• SSH Communications Security SSH daemon 1.2.1
• SSH Communications Security SSH daemon 1.2.2
• SSH Communications Security SSH daemon 1.2.3
• SSH Communications Security SSH daemon 1.2.4
• SSH Communications Security SSH daemon 1.2.5
• SSH Communications Security SSH daemon 1.2.6
• SSH Communications Security SSH daemon 1.2.7
• SSH Communications Security SSH daemon 1.2.8
• SSH Communications Security SSH daemon 1.2.9

Questions to Ask Vendors

1. Can you confirm whether your systems are affected by CVE-1999-0013, and if so, what steps are you currently taking to mitigate this vulnerability?
2. What is your estimated timeline for fully resolving CVE-1999-0013 in your products or services, and how will you communicate updates on this issue to us as your customer?

Recommended Actions

• Check out the advisory links provided below.

References

• https://nvd.nist.gov/vuln/detail/CVE-1999-0013