Back to search
CVE-2003-0190
Published: May 2, 2003
Modified: Aug 8, 2024
PUBLISHED
Description
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2003:222
vendor-advisory
7467
vdb-entry
RHSA-2003:224
vendor-advisory
oval:org.mitre.oval:def:445
vdb-entry
signature
TLSA-2003-31
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now