OpenSSH Authentication Execution Path Timing Information Leakage Weakness

Bugtraq ID: 7343
Class: Design Error
CVE:
Remote: Yes
Local: No
Published: Apr 15 2002 12:00AM
Updated: Apr 15 2002 12:00AM
Credit: Discovery of this issue is credited to Sebastian Krahmer.
Vulnerable: OpenSSH OpenSSH 3.0.2
- Debian Linux 3.0
+ FreeBSD FreeBSD 4.5 -STABLEpre2002-03-07
 + FreeBSD FreeBSD 4.5 -RELEASE
 + OpenPKG OpenPKG 1.0
+ Openwall Openwall GNU/*/Linux 0.1 -stable
 + SuSE Linux 8.0
OpenSSH OpenSSH 3.0.1 p1
OpenSSH OpenSSH 3.0.1
OpenSSH OpenSSH 3.0 p1
OpenSSH OpenSSH 3.0
OpenSSH OpenSSH 2.9.9
+ NetBSD NetBSD 1.5.2
+ SuSE Linux 7.3 sparc
 + SuSE Linux 7.3 ppc
 + SuSE Linux 7.3 i386
 + SuSE Linux 7.2
OpenSSH OpenSSH 2.9 p2
+ Caldera OpenLinux Server 3.1.1
+ Caldera OpenLinux Server 3.1
+ Caldera OpenLinux Workstation 3.1.1
+ Caldera OpenLinux Workstation 3.1
+ FreeBSD FreeBSD 4.4 -RELENG
 + HP Secure OS software for Linux 1.0
+ Immunix Immunix OS 7.0
+ MandrakeSoft Corporate Server 1.0.1
+ MandrakeSoft Single Network Firewall 7.2
+ Mandriva Linux Mandrake 8.1
+ Mandriva Linux Mandrake 8.0 ppc
 + Mandriva Linux Mandrake 8.0
+ Mandriva Linux Mandrake 7.2
+ Mandriva Linux Mandrake 7.1
+ Redhat Linux 7.2
+ Redhat Linux 7.1
+ Redhat Linux 7.0
+ Sun Cobalt RaQ 550
- SuSE Linux 7.3 sparc
 - SuSE Linux 7.3 ppc
 - SuSE Linux 7.3 i386
 - SuSE Linux 7.2 i386
 - SuSE Linux 7.1 x86
 - SuSE Linux 7.1 sparc
 - SuSE Linux 7.1 ppc
 - SuSE Linux 7.1 alpha
 OpenSSH OpenSSH 2.9 p1
- IBM AIX 4.3.3
- IBM AIX 4.3.2
- IBM AIX 4.3.1
- IBM AIX 4.3
OpenSSH OpenSSH 2.9
+ FreeBSD FreeBSD 4.6 -RELEASE
 + FreeBSD FreeBSD 4.6
+ FreeBSD FreeBSD 4.5 -RELEASE
 + FreeBSD FreeBSD 4.5
OpenSSH OpenSSH 2.5.2
- Caldera OpenUnix 8.0
- Caldera UnixWare 7.1.1
- Wirex Immunix OS 6.2
OpenSSH OpenSSH 2.5.1
+ NetBSD NetBSD 1.5.1
+ S.u.S.E. Linux Database Server 0
 + S.u.S.E. Linux Firewall on CD
+ S.u.S.E. SuSE eMail Server III
- SCO Open Server 5.0.6 a
 - SCO Open Server 5.0.6
- SCO Open Server 5.0.5
- SCO Open Server 5.0.4
- SCO Open Server 5.0.3
- SCO Open Server 5.0.2
- SCO Open Server 5.0.1
- SCO Open Server 5.0
+ SuSE Linux 7.3
+ SuSE Linux 7.2
+ SuSE Linux 7.1
+ SuSE SUSE Linux Enterprise Server 7
 OpenSSH OpenSSH 2.5
OpenSSH OpenSSH 2.3
- SuSE Linux 7.0 sparc
 - SuSE Linux 7.0 ppc
 - SuSE Linux 7.0 i386
 - SuSE Linux 7.0 alpha
 - SuSE Linux 6.4 ppc
 - SuSE Linux 6.4 i386
 - SuSE Linux 6.4 alpha
 OpenSSH OpenSSH 2.2
+ NetBSD NetBSD 1.5
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus