← Database

CVE-2003-0190

MEDIUM CVSS: 5.0 Published: 2003-05-12 Modified: 2026-06-16

Description

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.

Affected Platforms

Siemens Scalance X204Rna FirmwareOpenbsd OpensshSiemens Scalance X204Rna EccOpenpkg OpenpkgSiemens Scalance X204RnaSiemens Scalance X204Rna Ecc Firmware

Weakness Type

CWE-203

References