PT-2004-1397 · Ibm · Aix

CVE-2004-0243 · Publicado 2004-03-18 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AIX versions 4.3.3 through 5.1

Description The issue allows remote attackers to guess the password via brute force methods when direct remote login is disabled. This occurs because AIX displays a different message if the password is correct.

Recommendations For AIX versions 4.3.3 through 5.1, consider enabling direct remote login or implementing additional authentication measures to prevent brute force attacks.

Correção

Side Channel Attack

Enumeração de Fraquezas

CWE-203

Identificadores relacionados

CVE-2004-0243

Produtos afetados

Aix

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/15172 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=107583269206044&w=2 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0243 · Nota de Segurança