CVE-1999-1029: SSH SSH2

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.

Affected products

• SSH SSH2: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 1999-05-13. Last modified 2026-06-16.