CVE-1999-1010: OpenBSD OpenSSH

Low severity, CVSS 2.1. EPSS: 1.4% chance of exploitation in the next 30 days.

An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.

Affected products

• OpenBSD OpenSSH: version 1.2.27 only

Published 1999-12-14. Last modified 2026-06-16.