CVE-2003-1562

Опубликовано: 31 дек. 2003

Источник: nvd

CVSS2: 7.6

EPSS Низкий

Описание

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openbsd:openssh:1.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.2.27:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.5.7:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:1.5.8:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9.9:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9.9p2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:2.9p2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0.2p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.0p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2.2:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2.2p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.2.3p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.3:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.3p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.4:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.4p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.5:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.5p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6.1p1:*:*:*:*:*:*:*

cpe:2.3:a:openbsd:openssh:3.6.1p2:*:*:*:*:*:*:*

EPSS

Процентиль: 93%

0.05573

Низкий

7.6 High

CVSS2

Дефекты

CWE-362

Связанные уязвимости

CVE-2003-1562

redhat

больше 23 лет назад

CVE-2003-1562

debian

почти 23 года назад

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled ...

GHSA-49wx-627v-6mcq

github

больше 4 лет назад

ALT-PU-2024-3921

CVSS3: 9.8

altlinux

больше 2 лет назад

ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1

ALT-PU-2024-9513

CVSS3: 9.8

altlinux

около 2 лет назад

ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost

EPSS

Процентиль: 93%

0.05573

Низкий

7.6 High

CVSS2

Дефекты

CWE-362