CVE-2001-0144

OpenSSH - Remote Code Execution via CRC-32 Compensation Attack

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2001-0144. PoCs published by Teso, Michal Zalewski.

AI-analyzed exploit summary The provided entry is a placeholder link to a tarball (349.tgz) with no actual exploit code or details. It references milw0rm.com but lacks technical content.

Description

CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.

Exploits (2)

exploitdb STUB VERIFIED
by Teso · textremotemultiple
https://www.exploit-db.com/exploits/349

The provided entry is a placeholder link to a tarball (349.tgz) with no actual exploit code or details. It references milw0rm.com but lacks technical content.

Classification
Stub 30%
Attack Type
Other
Complexity
Unknown
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Michal Zalewski · cremoteunix
https://www.exploit-db.com/exploits/20617

This exploit targets an integer overflow vulnerability in SSH's CRC32 compensation attack detection code, allowing arbitrary memory writes and potential remote code execution. The provided patch includes shellcode for a TCP/36864 portshell, demonstrating the exploit's capability to execute arbitrary commands with root privileges.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Complex
Reliability
Theoretical
Target: SSH (versions vulnerable to CVE-2001-0144)
No auth needed
Prerequisites: Vulnerable SSH server or client · Ability to send large SSH packets
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/2347
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6083
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/503
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=98168366406903&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/795
Patch, Vendor Advisory vendor-advisory x_refsource_bindview
http://razor.bindview.com/publish/advisories/adv_ssh1crc.html
US Government Resource third-party-advisory x_refsource_cert
http://www.cert.org/advisories/CA-2001-35.html

Scores

EPSS 0.3242
EPSS Percentile 98.1%

Details

Status published
Products (13)
openbsd/openssh 1.2.2
openbsd/openssh 1.2.3
openbsd/openssh 2.1
openbsd/openssh 2.1.1
openbsd/openssh 2.2
ssh/ssh 1.2.24
ssh/ssh 1.2.25
ssh/ssh 1.2.26
ssh/ssh 1.2.27
ssh/ssh 1.2.28
... and 3 more
Published Mar 12, 2001
Tracked Since Feb 18, 2026