Lucene search
HistorySep 12, 2001 - 4:00 a.m.
CVE-1999-1029
cve-1999-1029
ssh server
sshd2
version 2.0.12
unrecorded login attempts
remote attack
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
Affected configurations
Node
sshssh2Match2.0
ORsshssh2Match2.0.1
ORsshssh2Match2.0.2
ORsshssh2Match2.0.3
ORsshssh2Match2.0.4
ORsshssh2Match2.0.5
ORsshssh2Match2.0.6
ORsshssh2Match2.0.7
ORsshssh2Match2.0.8
ORsshssh2Match2.0.9
ORsshssh2Match2.0.10
ORsshssh2Match2.0.11
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.1 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
Related for CVE-1999-1029