SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/277 | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=92663402004280&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/2193 |
Configurations
Configuration 1 (hide)
|
Information
Published : 1999-05-12 21:00
Updated : 2017-12-18 18:29
NVD link : CVE-1999-1029
Mitre link : CVE-1999-1029
JSON object : View
CWE
Products Affected
ssh
- ssh2