PT-2009-3807 · Pam Ssh · Pam Ssh

Kai Krakow · Publicado 2009-04-08 · Atualizado 2009-05-13 · CVE-2009-1273

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions pam ssh version 1.92

Description The issue allows remote attackers to enumerate usernames more easily due to different error messages generated for valid and invalid usernames.

Recommendations For pam ssh version 1.92, consider modifying the error message handling to prevent disclosure of username validity as a temporary workaround until a patch is available.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-1273

OPENSUSE-SU-2024:10464-1

Produtos afetados

Pam Ssh

Referências · 9

• https://security-tracker.debian.org/tracker/CVE-2009-1273 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1273 · Nota de Segurança
• https://redhat.com/archives/fedora-package-announce/2009-May/msg00145.html · Aviso do Fabricante
• http://secunia.com/advisories/34986 · Nota
• http://bugs.gentoo.org/show_bug.cgi?id=263579 · Nota
• https://osv.dev/vulnerability/CVE-2009-1273 · Aviso do Fabricante
• https://redhat.com/archives/fedora-package-announce/2009-May/msg00116.html · Aviso do Fabricante
• http://secunia.com/advisories/34536 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1273 · Aviso do Fabricante