CVE-2003-0190 OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a....
MediumCVSS 5.0
EPSS 76.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenBSD openssh | < 3.6.1 | 3.6.1 |
| OpenBSD openssh | = 3.6.1-p1 | No fix listed |
| openpkg | = 1.2 | No fix listed |
| openpkg | = 1.3 | No fix listed |
| Siemens scalance x204rna ecc firmware | < 3.2.7 | 3.2.7 |
| Siemens scalance x204rna firmware | < 3.2.7 | 3.2.7 |
| debian/openssh(Debian:12) | < 1:3.8.1p1-8.sarge.4 | 1:3.8.1p1-8.sarge.4 |
| debian/openssh(Debian:13) | < 1:3.8.1p1-8.sarge.4 | 1:3.8.1p1-8.sarge.4 |
| debian/openssh(Debian:14) | < 1:3.8.1p1-8.sarge.4 | 1:3.8.1p1-8.sarge.4 |
References
- Debian Security Tracker CVE-2003-0190 vendor-advisory
- bugs.debian.org issue-tracking
- lab.mediaservice.net broken-link
- 20030430 OpenSSH/PAM timing attack allows remote users identification broken-link mailing-list
- 20030430 OpenSSH/PAM timing attack allows remote users identification mailing-list third-party-advisory
- 20030806 [OpenPKG-SA-2003.035] OpenPKG Security Advisory (openssh) mailing-list third-party-advisory
- RHSA-2003:222 broken-link vendor-advisory
- RHSA-2003:224 broken-link vendor-advisory
- 7467 broken-link exploit patch third-party-advisory vdb-entry vendor-advisory
- TLSA-2003-31 broken-link vendor-advisory
- cert-portal.siemens.com third-party-advisory
- oval:org.mitre.oval:def:445 broken-link signature vdb-entry