CVE-1999-1010
LowExploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
SSH server version 1.2.27 allows a client to use the 'none' cipher, even if it is not permitted by the server policy.
Risk Assessment
This may lead to unauthorized access to data, as the lack of encryption exposes communication to eavesdropping.
Recommendation
It is recommended to upgrade the SSH server to a newer version that does not allow the use of the 'none' cipher.
Other vulnerabilities in SSH server 1.2.27
See all- CVE-2025-22869High
SSH servers implementing file transfer protocols are vulnerable to a denial of service attack from clients that complete the key exchange slowly or not at all, causing pending content to be read into memory but never transmitted.
- CVE-2025-58181Medium
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
Original NVD description (English source)
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS