CVE-1999-0398: SSH

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login.

Affected products

• SSH SSH: version 1.2.27 only
• SSH SSH2: version 2.0.11 only

Published 1999-01-01. Last modified 2026-06-16.