CVE-2001-1382: OpenBSD OpenSSH

Medium severity, CVSS 5.0. EPSS: 7.8% chance of exploitation in the next 30 days.

The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

Affected products

• OpenBSD OpenSSH: up to and including 2.9.9p2

Published 2001-09-27. Last modified 2026-06-16.