CVE-2003-0190

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist,…

mitre·CWE-203·Published 2003-05-02

CVSS

—

EPSS

0.77

KEV

Exploits

Vendor statements (3)

redhat.com
redhat.com
turbolinux.com

cve.orgen

214 chars

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.

NVDes

252 chars

OpenSSH-portable (OpenSSH) 3.6.1p1 y anteriores con soporte PAM activado envía inmediatamente un mensaje de error cuando un usuario no existe, lo que permite a atacantes remotos determinar nombres de usuario válidos mediante un ataque de temporización.

CVE-2003-0190

Vendor statements (3)

CVSS metrics across sources