CVE-2000-0575

High CVSS 7.2

Published 2000-07-05 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-2000-0575, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote attackers to sniff the ticket cache if the home directory is installed on NFS.

Sources

NVD record for CVE-2000-0575

CVSS vector: AV:L/AC:L/Au:N/C:C/I:C/A:C