CVE-1999-1231

Опубликовано: 09 июн. 1999

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.

Ссылки

http://www.securityfocus.com/archive/1/14758
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2276
http://www.securityfocus.com/archive/1/14758
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/2276

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ssh:ssh2:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.10:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.11:*:*:*:*:*:*:*

cpe:2.3:a:ssh:ssh2:2.0.12:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00961

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7g97-5hq7-x7mm

github

около 3 лет назад