CVE-2004-2760: Medium severity OpenBSD OpenSSH vulnerability

Published Dec 31, 2004

Updated

sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by observing the connection state, a different vulnerability than CVE-2003-0190. NOTE: it could be argued that in most environments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability.

Affected Software

2 affected components

OpenBSD OpenSSH=3.5p1

OpenBSD OpenSSH=3.5

Event History

Dec 31, 2004

CVE Published

05:00 AM

Aug 4, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2004-2760?

CVE-2004-2760 is considered a medium severity vulnerability.

How do I fix CVE-2004-2760?

To mitigate CVE-2004-2760, ensure that PermitRootLogin is set to 'no' in your SSH configuration and utilize alternative methods for secure access.

What systems are affected by CVE-2004-2760?

CVE-2004-2760 affects OpenSSH versions 3.5p1 and 3.5.

Can CVE-2004-2760 lead to a remote attack?

Yes, CVE-2004-2760 can enable remote attackers to perform password guessing attacks.

Is there any workaround for CVE-2004-2760?

A workaround for CVE-2004-2760 includes implementing additional authentication methods or using tools that obscure login attempts.