First published: Thu May 13 1999(Updated: )
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
SSH (Secure Shell) | =2.0.3 | |
SSH (Secure Shell) | =2.0.8 | |
SSH (Secure Shell) | =2.0.11 | |
SSH (Secure Shell) | =2.0.9 | |
SSH (Secure Shell) | =2.0 | |
SSH (Secure Shell) | =2.0.5 | |
SSH (Secure Shell) | =2.0.6 | |
SSH (Secure Shell) | =2.0.4 | |
SSH (Secure Shell) | =2.0.1 | |
SSH (Secure Shell) | =2.0.10 | |
SSH (Secure Shell) | =2.0.7 | |
SSH (Secure Shell) | =2.0.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.