Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2003-0190
HistoryMay 12, 2003 - 4:00 a.m.

CVE-2003-0190

2003-05-1204:00:00
CWE-203
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.2 High

AI Score

Confidence

High

0.065 Low

EPSS

Percentile

93.7%

JSON

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.

Affected configurations

NVD
Node
openbsdopensshRange<3.6.1
OR
openbsdopensshMatch3.6.1p1
Node
openpkgopenpkgMatch1.2
OR
openpkgopenpkgMatch1.3
Node
siemensscalance_x204rna_ecc_firmwareRange<3.2.7
AND
siemensscalance_x204rna_eccMatch-
Node
siemensscalance_x204rna_firmwareRange<3.2.7
AND
siemensscalance_x204rnaMatch-

Related

ubuntucve 1
debiancve 3
cve 3
openvas 3
cvelist 3
redhat 1
securityvulns 2
ubuntu 1
nessus 4
nvd 2
seebug 3
packetstorm 1
exploitpack 1
checkpoint_advisories 1
exploitdb 1
ics 1
ubuntucve
ubuntucve
CVE-2003-0190
2003-05-12 00:00:00
debiancve
debiancve
CVE-2003-0190
2003-05-12 04:00:00
CVE-2003-1562
2008-08-04 00:00:00
CVE-2004-2760
2008-08-04 10:00:00
cve
cve
CVE-2003-0190
2003-05-12 04:00:00
CVE-2003-1562
2008-08-04 00:00:00
CVE-2004-2760
2008-08-04 10:00:00
openvas
openvas
SLES9: Security update for OpenSSH
2009-10-10 00:00:00
SLES9: Security update for OpenSSH
2009-10-10 00:00:00
Ubuntu: Security Advisory (USN-34-1)
2022-08-26 00:00:00
cvelist
cvelist
CVE-2003-0190
2003-05-02 00:00:00
CVE-2003-1562
2008-08-04 00:00:00
CVE-2004-2760
2008-08-04 10:00:00
redhat
redhat
(RHSA-2003:224) openssh security update
2003-07-29 00:00:00
securityvulns
securityvulns
yet another OpenSSH timing leak?
2006-10-09 00:00:00
OpenSSH/PAM timing attack allows remote users identification
2003-05-03 00:00:00
ubuntu
ubuntu
OpenSSH information leakage
2004-11-30 00:00:00
nessus
nessus
Ubuntu 4.10 : openssh information leakage (USN-34-1)
2006-01-15 00:00:00
OpenSSH w/ PAM Multiple Timing Attack Weaknesses
2003-05-06 00:00:00
RHEL 2.1 : openssh (RHSA-2003:224)
2004-07-06 00:00:00
nvd
nvd
CVE-2003-1562
2003-12-31 05:00:00
CVE-2004-2760
2004-12-31 05:00:00
seebug
seebug
Portable OpenSSH &lt;= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-14 00:00:00
Portable OpenSSH &lt;= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2007-02-13 00:00:00
Portable OpenSSH <= 3.6.1p-PAM / 4.1-SUSE Timing Attack Exploit
2014-07-01 00:00:00
packetstorm
packetstorm
openssh-timing.txt
2007-02-14 00:00:00
exploitpack
exploitpack
Portable OpenSSH 3.6.1p-PAM4.1-SuSE - Timing Attack
2007-02-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Multiple SSH Initial Connection Requests (CVE-2003-0190; CVE-2006-5229; CVE-2016-6210)
2011-03-29 00:00:00
exploitdb
exploitdb
Portable OpenSSH 3.6.1p-PAM/4.1-SuSE - Timing Attack
2007-02-13 00:00:00
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

9.2 High

AI Score

Confidence

High

0.065 Low

EPSS

Percentile

93.7%

JSON
Related for NVD:CVE-2003-0190
ubuntucve1debiancve3cve3openvas3cvelist3redhat1securityvulns2ubuntu1nessus4nvd2seebug3packetstorm1exploitpack1checkpoint_advisories1exploitdb1ics1