← Back

CVE-2003-0190

nvd nist
Published: May 12, 2003Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, which allows remote attackers to determine valid usernames via a timing attack.

Affected (6)

Openbsd
1 product
Openssh
Openpkg
1 product
Openpkg
Siemens
2 products
Scalance X204rna Ecc Firmware
Scalance X204rna Firmware
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Openbsd
Openssh
Before 3.6.1
Openssh
Version 3.6.1 p1
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Openpkg
Openpkg
Version 1.2
Openpkg
Version 1.3
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance X204rna Ecc Firmware
Before 3.2.7
Running on/withPlatform Versions
Siemens
Scalance X204rna Ecc
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Scalance X204rna Firmware
Before 3.2.7
Running on/withPlatform Versions
Siemens
Scalance X204rna
All versions

Related CWEs

CWE-203
Observable Discrepancy
The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (20)

Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkExploitPatchThird Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link

Timeline

No history available yet.