EDB-3303
functionalPortable OpenSSH 3.6.1p-PAM/4.1-SuSE - Timing Attack
view exploit source exploit_dbverifiedtype remoteauthor Marco Ivaldipublished 2007-02-13catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2006-5229US | low2.6 | Exploit | ||
OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via t… | ||||
| CVE-2003-0190US | medium5.0 | Exploit | ||
OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine va… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan