CVE-1999-0248: SSH

High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

Affected products

• SSH SSH: version 1.2.27 only

Published 1999-01-01. Last modified 2026-06-16.