Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-1273

Опубликовано: 24 мар. 2009
Источник: redhat
EPSS Низкий

Описание

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=492153pam_ssh: Password prompt varies for existent and non-existent users

EPSS

Процентиль: 68%
0.01305
Низкий

Связанные уязвимости

ubuntu
больше 17 лет назад

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.

nvd
больше 17 лет назад

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.

debian
больше 17 лет назад

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled ...

github
больше 4 лет назад

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.

EPSS

Процентиль: 68%
0.01305
Низкий