Security readout for executives and security teams
A very old flaw in SSH version 1.2.17 could let one user on a shared system take over another user's login session by exploiting a timing gap in how the SSH authentication agent handled connections. The impact today is mostly historical, since the affected software is decades out of date, but any system still running it would be at risk of user impersonation. Exposure is limited to multi-user hosts still running SSH1 1.2.17 or comparable pre-fix builds. Modern OpenSSH installations are not described as affected in the cited sources. Realistic risk concentrates on unmaintained legacy Unix systems, research artifacts, or historical appliances that were never upgraded off SSH1. Low urgency for modern environments, but treat as a hard stop for any legacy Unix host still running SSH1. If discovered, prioritize decommissioning or upgrading rather than patching in place, since the affected codebase is unsupported. Mitigation focus: Retire any hosts still running SSH1 (ssh-1.2.x); migrate to a currently supported OpenSSH release.; Disable SSH protocol 1 and forbid legacy ssh-agent forwarding on shared multi-user systems.; Restrict local shell access on legacy Unix hosts pending decommissioning..
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-1999-0248 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.