Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2003-1562
HistoryAug 04, 2008 - 12:00 a.m.

CVE-2003-1562

2008-08-0400:00:00
Debian Security Bug Tracker
security-tracker.debian.org
19

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.065 Low

EPSS

Percentile

93.7%

JSON

sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.

Related

cve 3
cvelist 3
nvd 3
nessus 4
ubuntucve 1
debiancve 2
securityvulns 2
ubuntu 1
openvas 3
redhat 1
seebug 3
packetstorm 1
exploitpack 1
checkpoint_advisories 1
exploitdb 1
ics 1
cve
cve
CVE-2003-1562
2008-08-04 00:00:00
CVE-2003-0190
2003-05-12 04:00:00
CVE-2004-2760
2008-08-04 10:00:00
cvelist
cvelist
CVE-2003-1562
2008-08-04 00:00:00
CVE-2003-0190
2003-05-02 00:00:00
CVE-2004-2760
2008-08-04 10:00:00
nvd
nvd
CVE-2003-1562
2003-12-31 05:00:00
CVE-2003-0190
2003-05-12 04:00:00
CVE-2004-2760
2004-12-31 05:00:00
nessus
nessus
RHEL 2.1 : openssh (RHSA-2003:224)
2004-07-06 00:00:00
OpenSSH w/ PAM Multiple Timing Attack Weaknesses
2003-05-06 00:00:00
Ubuntu 4.10 : openssh information leakage (USN-34-1)
2006-01-15 00:00:00
ubuntucve
ubuntucve
CVE-2003-0190
2003-05-12 00:00:00
debiancve
debiancve
CVE-2003-0190
2003-05-12 04:00:00
CVE-2004-2760
2008-08-04 10:00:00
securityvulns
securityvulns
OpenSSH/PAM timing attack allows remote users identification
2003-05-03 00:00:00
yet another OpenSSH timing leak?
2006-10-09 00:00:00
ubuntu
ubuntu
OpenSSH information leakage
2004-11-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-34-1)
2022-08-26 00:00:00
SLES9: Security update for OpenSSH
2009-10-10 00:00:00
SLES9: Security update for OpenSSH
2009-10-10 00:00:00
redhat
redhat
(RHSA-2003:224) openssh security update
2003-07-29 00:00:00
seebug
seebug
Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-14 00:00:00
Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-13 00:00:00
Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2014-07-01 00:00:00
packetstorm
packetstorm
openssh-timing.txt
2007-02-14 00:00:00
exploitpack
exploitpack
Portable OpenSSH 3.6.1p-PAM4.1-SuSE - Timing Attack
2007-02-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Multiple SSH Initial Connection Requests (CVE-2003-0190; CVE-2006-5229; CVE-2016-6210)
2011-03-29 00:00:00
exploitdb
exploitdb
Portable OpenSSH 3.6.1p-PAM/4.1-SuSE - Timing Attack
2007-02-13 00:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.065 Low

EPSS

Percentile

93.7%

JSON
Related for DEBIANCVE:CVE-2003-1562
cve3cvelist3nvd3nessus4ubuntucve1debiancve2securityvulns2ubuntu1openvas3redhat1seebug3packetstorm1exploitpack1checkpoint_advisories1exploitdb1ics1