Lucene search
HistoryMay 13, 1999 - 4:00 a.m.
CVE-1999-1029
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the password without showing up in the audit logs.
Affected configurations
Node
sshssh2Match2.0
ORsshssh2Match2.0.1
ORsshssh2Match2.0.2
ORsshssh2Match2.0.3
ORsshssh2Match2.0.4
ORsshssh2Match2.0.5
ORsshssh2Match2.0.6
ORsshssh2Match2.0.7
ORsshssh2Match2.0.8
ORsshssh2Match2.0.9
ORsshssh2Match2.0.10
ORsshssh2Match2.0.11
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.4%
Related for NVD:CVE-1999-1029