Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

OpenSSH-Portable Existing Password Remote Information Disclosure Weakness

A proof-of-concept script is available.

Attackers can also manually verify the existence of this phenomenon by using a combination of a valid SSH client application and a packet-sniffing utility.







 

Privacy Statement
Copyright 2009, SecurityFocus