QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-1273

Back to search

CVE-2009-1273

Published: Apr 8, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

pam_ssh 1.92 and possibly other versions, as used when PAM is compiled with USE=ssh, generates different error messages depending on whether the username is valid or invalid, which makes it easier for remote attackers to enumerate usernames.

VendorProductVersions

n/a

n/a

affected
n/a

References

34986
third-party-advisory
x_refsource_SECUNIA
34536
third-party-advisory
x_refsource_SECUNIA
FEDORA-2009-3500
vendor-advisory
x_refsource_FEDORA
FEDORA-2009-3627
vendor-advisory
x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now