Описание
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
Дополнительная информация
Статус:
Low
https://bugzilla.redhat.com/show_bug.cgi?id=1616997security flaw
EPSS
Процентиль: 100%
0.76751
Высокий
Связанные уязвимости
nvd
больше 23 лет назад
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
debian
больше 23 лет назад
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enable ...
EPSS
Процентиль: 100%
0.76751
Высокий