OpenSSH Remote Root Authentication Timing Side-Channel Weakness

Bugtraq ID: 7482
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: May 01 2003 12:00AM
Updated: Aug 01 2008 04:37PM
Credit: Discovery credited to Ethan Benson <erbenson@alaska.net>.
Vulnerable: OpenSSH OpenSSH 3.9 p1
OpenSSH OpenSSH 3.8.1 p1
OpenSSH OpenSSH 3.8 p1
OpenSSH OpenSSH 3.7.1 p1
OpenSSH OpenSSH 3.7.1
OpenSSH OpenSSH 3.7 p1
OpenSSH OpenSSH 3.7 .1p2
OpenSSH OpenSSH 3.7
OpenSSH OpenSSH 3.6.1 p2
OpenSSH OpenSSH 3.6.1 p1
OpenSSH OpenSSH 3.6.1
OpenSSH OpenSSH 3.5 p1
OpenSSH OpenSSH 3.5
OpenSSH OpenSSH 3.4 p1-1
OpenSSH OpenSSH 3.4 p1
OpenSSH OpenSSH 3.4
OpenSSH OpenSSH 3.3 p1
OpenSSH OpenSSH 3.3
OpenSSH OpenSSH 3.2.3 p1
OpenSSH OpenSSH 3.2.2 p1
OpenSSH OpenSSH 3.2
OpenSSH OpenSSH 3.1 p1
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus